b09d14fbdce91d25ec9e2c680afca3ace960d85324e7639a2aa5eb70bf1ea6d2

Login
Reports

Overview

overview

Static

static

##!!SetUp_...up.exe

windows7-x64

##!!SetUp_...up.exe

windows10-2004-x64

##!!SetUp_...40.dll

windows7-x64

##!!SetUp_...40.dll

windows10-2004-x64

##!!SetUp_...pp.dll

windows7-x64

##!!SetUp_...pp.dll

windows10-2004-x64

##!!SetUp_...1].exe

windows7-x64

##!!SetUp_...1].exe

windows10-2004-x64

##!!SetUp_...1].exe

windows7-x64

##!!SetUp_...1].exe

windows10-2004-x64

##!!SetUp_...1].exe

windows7-x64

##!!SetUp_...1].exe

windows10-2004-x64

##!!SetUp_...-1.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

##!!SetUp_...-0.dll

windows10-2004-x64

Analysis

max time kernel
144s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
19/06/2024, 17:01

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/Setup.exe

Resource

win7-20240611-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/Setup.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

14 signatures

150 seconds

stealc vidar discovery spyware stealer

Behavioral task

behavioral3

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/vcruntime140.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/vcruntime140.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/vcruntime140_app.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/vcruntime140_app.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/HDHelper_[0MB]_[1].exe

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/HDHelper_[0MB]_[1].exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/NvStereoUtilityOGL_[1MB]_[1].exe

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/NvStereoUtilityOGL_[1MB]_[1].exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/VSLauncher_[0MB]_[1].exe

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/VSLauncher_[0MB]_[1].exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-processthreads-l1-1-1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-profile-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-rtlsupport-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-string-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-synch-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-synch-l1-2-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-sysinfo-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-timezone-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-core-util-l1-1-0.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-conio-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-convert-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-environment-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-filesystem-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-heap-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-locale-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-math-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-multibyte-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-private-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

##!!SetUp_2244_Pa$sW0rd$$!!/x86/api-ms-win-crt-process-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
##!!SetUp_2244_Pa$sW0rd$$!!/x86/NvStereoUtilityOGL_[1MB]_[1].exe
Size 1.1MB
Sample240619-vjt19svalh
SHA256 c2c71318a17f7f767e5d203d22b48f27eecae46a4f37082d7b413c51da6183b3
MD5 017cd77d01314e72a973ff0c7882453d
SHA1 288238159cf18418149f5cd3475a6ebb9f45a631
SHA512 b1d4c87e7d8585c16aa50499398c9a04d90bcd32ab36fbf7a357bc15abce0cd802a259cc7431de9fe2ca77aa68298aab5041157308be4601f7f7aa0c3c180b03
SSDEEP 24576:zCVnoQHgdFnJhVaqajA4+ubDaSKYqSpamUbSBe:zgnoFFnJjaqajA4+yaSK5SpamUbSBe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2676	4344	WerFault.exe	82
924	4344	WerFault.exe	82

Processes

C:\Users\Admin\AppData\Local\Temp\##!!SetUp_2244_Pa$sW0rd$$!!\x86\NvStereoUtilityOGL_[1MB]_[1].exe
"C:\Users\Admin\AppData\Local\Temp\##!!SetUp_2244_Pa$sW0rd$$!!\x86\NvStereoUtilityOGL_[1MB]_[1].exe"
1⤵
PID:4344
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 452
  2⤵
  - Program crash
  PID:2676
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 560
  2⤵
  - Program crash
  PID:924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4344 -ip 4344
1⤵
PID:1328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4344 -ip 4344
1⤵
PID:3492

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads