0c5787229f775fcbdd5d466b411c628480c0a0b655b1f7705b90448296916112

Login
Reports

Overview

overview

Static

static

!#File?_#!...up.exe

windows7-x64

!#File?_#!...up.exe

windows10-2004-x64

!#File?_#!...in.dll

windows7-x64

!#File?_#!...in.dll

windows10-2004-x64

!#File?_#!...ws.dll

windows7-x64

!#File?_#!...ws.dll

windows10-2004-x64

!#File?_#!...40.dll

windows7-x64

!#File?_#!...40.dll

windows10-2004-x64

!#File?_#!...in.dll

windows7-x64

!#File?_#!...in.dll

windows10-2004-x64

!#File?_#!...in.dll

windows7-x64

!#File?_#!...in.dll

windows10-2004-x64

!#File?_#!...40.dll

windows7-x64

!#File?_#!...40.dll

windows10-2004-x64

!#File?_#!..._1.dll

windows7-x64

!#File?_#!..._1.dll

windows10-2004-x64

!#File?_#!...pp.dll

windows7-x64

!#File?_#!...pp.dll

windows10-2004-x64

!#File?_#!...in.dll

windows7-x64

!#File?_#!...in.dll

windows10-2004-x64

!#File?_#!...1].exe

windows7-x64

!#File?_#!...1].exe

windows10-2004-x64

!#File?_#!...1].exe

windows7-x64

!#File?_#!...1].exe

windows10-2004-x64

!#File?_#!...1].exe

windows7-x64

!#File?_#!...1].exe

windows10-2004-x64

!#File?_#!...-1.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

!#File?_#!...-0.dll

windows10-2004-x64

Analysis

max time kernel
140s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
17/06/2024, 15:57

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/Setup.exe

Resource

win7-20240508-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/Setup.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

14 signatures

150 seconds

stealc vidar discovery spyware stealer

Behavioral task

behavioral3

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_desktop_sleep_plugin.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_desktop_sleep_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_windows.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_windows.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/msvcp140.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/msvcp140.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/tray_manager_plugin.dll

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/tray_manager_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/url_launcher_windows_plugin.dll

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/url_launcher_windows_plugin.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140_1.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140_1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140_app.dll

Resource

win7-20240611-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/vcruntime140_app.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/windows_single_instance_plugin.dll

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/windows_single_instance_plugin.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/HDHelper_[0MB]_[1].exe

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/HDHelper_[0MB]_[1].exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/NvStereoUtilityOGL_[1MB]_[1].exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/NvStereoUtilityOGL_[1MB]_[1].exe

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/VSLauncher_[0MB]_[1].exe

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/VSLauncher_[0MB]_[1].exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-processthreads-l1-1-1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-profile-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-rtlsupport-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-string-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-synch-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

!#File?_#!U?e~Passw0rd__~.~160617~.~__/x86/api-ms-win-core-synch-l1-2-0.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
!#File?_#!U?e~Passw0rd__~.~160617~.~__/flutter_windows.dll
Size 17.4MB
Sample240617-tedm2szbpm
SHA256 02e83afa12741cc245c2d3e8754beded58efc3c5173987910d84541f098d6ae9
MD5 b240e55a02ba690ae0c07b97eb7a78ed
SHA1 829ac8c313f253eeeec33d8bd9f4fe8b1c8e2cc8
SHA512 76fcb731389ce5a0d41b20395c72baca5aa128b591e2b56a8f311cd65983623342f129a824acddd98c74d54bf45ba9b360ea5c37b23c8204c1febef9d79dba3b
SSDEEP 98304:uceV/7q+mWCWfHzZm5bbJTCVbnL39s1qlYzauFIrwYhLoCRH3Sz+cyBgPvA4hZ3u:eEJTKth06CBAeVLCH
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\!#File__#!U_e~Passw0rd__~.~160617~.~__\flutter_windows.dll,#1
1⤵
PID:3640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4036 --field-trial-handle=2676,i,447940133669489189,1353734109898858672,262144 --variations-seed-version /prefetch:8
1⤵
PID:4768

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads