a2b34479327477c185736f3d540ab29f6a4d1b9f3b66109e4e706760daec5b61

Login
Reports

Overview

overview

Static

static

@^NewFile_...up.exe

windows7-x64

@^NewFile_...up.exe

windows10-2004-x64

@^NewFile_...40.dll

windows7-x64

@^NewFile_...40.dll

windows10-2004-x64

@^NewFile_...pp.dll

windows7-x64

@^NewFile_...pp.dll

windows10-2004-x64

@^NewFile_...1].exe

windows7-x64

@^NewFile_...1].exe

windows10-2004-x64

@^NewFile_...1].exe

windows7-x64

@^NewFile_...1].exe

windows10-2004-x64

@^NewFile_...1].exe

windows7-x64

@^NewFile_...1].exe

windows10-2004-x64

@^NewFile_...-1.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

@^NewFile_...-0.dll

windows10-2004-x64

Analysis

max time kernel
49s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
17/06/2024, 18:25

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

@^NewFile_PCSetup_77665_????????_^$/Setup.exe

Resource

win7-20240611-en

windows7-x64

26 signatures

150 seconds

Behavioral task

behavioral2

Sample

@^NewFile_PCSetup_77665_????????_^$/Setup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

23 signatures

150 seconds

stealc vidar discovery spyware stealer

Behavioral task

behavioral3

Sample

@^NewFile_PCSetup_77665_????????_^$/vcruntime140.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

@^NewFile_PCSetup_77665_????????_^$/vcruntime140.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

@^NewFile_PCSetup_77665_????????_^$/vcruntime140_app.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

@^NewFile_PCSetup_77665_????????_^$/vcruntime140_app.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/HDHelper_[0MB]_[1].exe

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/HDHelper_[0MB]_[1].exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/NvStereoUtilityOGL_[1MB]_[1].exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/NvStereoUtilityOGL_[1MB]_[1].exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/VSLauncher_[0MB]_[1].exe

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/VSLauncher_[0MB]_[1].exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-processthreads-l1-1-1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-profile-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-rtlsupport-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-string-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-synch-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-synch-l1-2-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-sysinfo-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-timezone-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-core-util-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-conio-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-convert-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-environment-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-filesystem-l1-1-0.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-heap-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-locale-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-math-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-multibyte-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-private-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

@^NewFile_PCSetup_77665_????????_^$/x86/api-ms-win-crt-process-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
@^NewFile_PCSetup_77665_????????_^$/x86/NvStereoUtilityOGL_[1MB]_[1].exe
Size 1.1MB
Sample240617-w2pd6starm
SHA256 c2c71318a17f7f767e5d203d22b48f27eecae46a4f37082d7b413c51da6183b3
MD5 017cd77d01314e72a973ff0c7882453d
SHA1 288238159cf18418149f5cd3475a6ebb9f45a631
SHA512 b1d4c87e7d8585c16aa50499398c9a04d90bcd32ab36fbf7a357bc15abce0cd802a259cc7431de9fe2ca77aa68298aab5041157308be4601f7f7aa0c3c180b03
SSDEEP 24576:zCVnoQHgdFnJhVaqajA4+ubDaSKYqSpamUbSBe:zgnoFFnJjaqajA4+yaSK5SpamUbSBe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1584	2096	WerFault.exe	82
3008	2096	WerFault.exe	82

Processes

C:\Users\Admin\AppData\Local\Temp\@^NewFile_PCSetup_77665__________^$\x86\NvStereoUtilityOGL_[1MB]_[1].exe
"C:\Users\Admin\AppData\Local\Temp\@^NewFile_PCSetup_77665__________^$\x86\NvStereoUtilityOGL_[1MB]_[1].exe"
1⤵
PID:2096
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2096 -s 540
  2⤵
  - Program crash
  PID:1584
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2096 -s 540
  2⤵
  - Program crash
  PID:3008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2096 -ip 2096
1⤵
PID:4204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 2096 -ip 2096
1⤵
PID:1464

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads