0c5787229f775fcbdd5d466b411c628480c0a0b655b1f7705b90448296916112

Login
Reports

Overview

overview

Static

static

!#File?_#!...up.exe

windows7-x64

!#File?_#!...up.exe

windows10-2004-x64

!#File?_#!...in.dll

windows7-x64

!#File?_#!...in.dll

windows10-2004-x64

!#File?_#!...ws.dll

windows7-x64

!#File?_#!...ws.dll

windows10-2004-x64

!#File?_#!...40.dll

windows7-x64

!#File?_#!...40.dll

windows10-2004-x64

!#File?_#!...in.dll

windows7-x64

!#File?_#!...in.dll

windows10-2004-x64

!#File?_#!...in.dll

windows7-x64

!#File?_#!...in.dll

windows10-2004-x64

!#File?_#!...40.dll

windows7-x64

!#File?_#!...40.dll

windows10-2004-x64

!#File?_#!..._1.dll

windows7-x64

!#File?_#!..._1.dll

windows10-2004-x64

!#File?_#!...pp.dll

windows7-x64

!#File?_#!...pp.dll

windows10-2004-x64

!#File?_#!...in.dll

windows7-x64

!#File?_#!...in.dll

windows10-2004-x64

!#File?_#!...1].exe

windows7-x64

!#File?_#!...1].exe

windows10-2004-x64

!#File?_#!...1].exe

windows7-x64

!#File?_#!...1].exe

windows10-2004-x64

!#File?_#!...1].exe

windows7-x64

!#File?_#!...1].exe

windows10-2004-x64

!#File?_#!...-1.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
17/06/2024, 15:57

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/Setup.exe

Resource

win7-20240508-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/Setup.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

14 signatures

150 seconds

stealc vidar discovery spyware stealer

Behavioral task

behavioral3

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_desktop_sleep_plugin.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_desktop_sleep_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_windows.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_windows.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/msvcp140.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/msvcp140.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/tray_manager_plugin.dll

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/tray_manager_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/url_launcher_windows_plugin.dll

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/url_launcher_windows_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140_1.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140_1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140_app.dll

Resource

win7-20240611-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140_app.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/windows_single_instance_plugin.dll

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/windows_single_instance_plugin.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/HDHelper_[0MB]_[1].exe

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/HDHelper_[0MB]_[1].exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/NvStereoUtilityOGL_[1MB]_[1].exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/NvStereoUtilityOGL_[1MB]_[1].exe

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/VSLauncher_[0MB]_[1].exe

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/VSLauncher_[0MB]_[1].exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-processthreads-l1-1-1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-profile-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-rtlsupport-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-string-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-synch-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-synch-l1-2-0.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-processthreads-l1-1-1.dll
Size 17KB
Sample240617-tedm2szbpm
SHA256 e5ea2c21fb225090f7d0db6c6990d67b1558d8e834e86513bc8ba7a43c4e7b36
MD5 29001f316ccfc800e2246743df9b15b3
SHA1 dc734266648d3463c1f8d88c1ce7d900a4e3b26c
SHA512 4cffc0c6f94fcd1155909993c622b9103abd7a7bce88742a10abd6a3496a334d667a39bb601f99eb174aa847d7dae056e0d9769754ca86320579b262a20a6599
SSDEEP 384:WRtwDfIe9jWfhWC+Y3DGk8ZpH3GCJErra8o7Q+Y3DGUKn8JN77hhET:ape9A5DGkiRBEXaR70DGa3hqT
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\!#File__#!U_e~Passw0rd__~.~160617~.~__\x86\api-ms-win-core-processthreads-l1-1-1.dll,#1
1⤵
PID:2960

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads