Overview
overview
7Static
static
7Archivariu...A3.dll
windows7-x64
1Archivariu...A3.dll
windows10-2004-x64
3Archivariu...ll.dll
windows7-x64
1Archivariu...ll.dll
windows10-2004-x64
1Archivariu...AI.dll
windows7-x64
6Archivariu...AI.dll
windows10-2004-x64
3Archivariu...00.exe
windows7-x64
6Archivariu...00.exe
windows10-2004-x64
1Archivariu...st.vbs
windows7-x64
1Archivariu...st.vbs
windows10-2004-x64
1Archivariu...ut.htm
windows7-x64
1Archivariu...ut.htm
windows10-2004-x64
1Archivariu...ts.htm
windows7-x64
1Archivariu...ts.htm
windows10-2004-x64
1Archivariu...te.htm
windows7-x64
1Archivariu...te.htm
windows10-2004-x64
1Archivariu...es.htm
windows7-x64
1Archivariu...es.htm
windows10-2004-x64
1Archivariu...ex.htm
windows7-x64
1Archivariu...ex.htm
windows10-2004-x64
1Archivariu...es.htm
windows7-x64
1Archivariu...es.htm
windows10-2004-x64
1Archivariu...ys.htm
windows7-x64
1Archivariu...ys.htm
windows10-2004-x64
1Archivariu...ng.htm
windows7-x64
1Archivariu...ng.htm
windows10-2004-x64
1Archivariu...es.htm
windows7-x64
1Archivariu...es.htm
windows10-2004-x64
1Archivariu...ts.htm
windows7-x64
1Archivariu...ts.htm
windows10-2004-x64
1Archivariu...er.htm
windows7-x64
1Archivariu...er.htm
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
25-06-2024 16:31
Behavioral task
behavioral1
Sample
Archivarius 3000/A3.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Archivarius 3000/A3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Archivarius 3000/A3Shell.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
Archivarius 3000/A3Shell.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
Archivarius 3000/AI.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Archivarius 3000/AI.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Archivarius 3000/Archivarius3000.exe
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
Archivarius 3000/Archivarius3000.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
Archivarius 3000/Data/StopList.vbs
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
Archivarius 3000/Data/StopList.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
Archivarius 3000/Help/Dutch/About.htm
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
Archivarius 3000/Help/Dutch/About.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Archivarius 3000/Help/Dutch/Contacts.htm
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
Archivarius 3000/Help/Dutch/Contacts.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Archivarius 3000/Help/Dutch/Create.htm
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
Archivarius 3000/Help/Dutch/Create.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Archivarius 3000/Help/Dutch/Features.htm
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
Archivarius 3000/Help/Dutch/Features.htm
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
Archivarius 3000/Help/Dutch/Index.htm
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Archivarius 3000/Help/Dutch/Index.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Archivarius 3000/Help/Dutch/Indexes.htm
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
Archivarius 3000/Help/Dutch/Indexes.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Archivarius 3000/Help/Dutch/Keys.htm
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
Archivarius 3000/Help/Dutch/Keys.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
Archivarius 3000/Help/Dutch/Ordering.htm
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
Archivarius 3000/Help/Dutch/Ordering.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Archivarius 3000/Help/Dutch/Queries.htm
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
Archivarius 3000/Help/Dutch/Queries.htm
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
Archivarius 3000/Help/Dutch/Results.htm
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
Archivarius 3000/Help/Dutch/Results.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Archivarius 3000/Help/Dutch/Scheduler.htm
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Archivarius 3000/Help/Dutch/Scheduler.htm
Resource
win10v2004-20240508-en
General
-
Target
Archivarius 3000/Help/Dutch/Create.htm
-
Size
2KB
-
MD5
28c9355b3bd0cb18ba0ca211d9eb8f15
-
SHA1
a3191c9c6236a88ca28249f4538822d392ad0060
-
SHA256
90fb93e9b0d2d631e80494815796cd9fec3ad9433ec74dcea3bf16b3ef79594f
-
SHA512
f3da094f714460a847216c54ccc0b6f0e978bf73d921b0e4cd6b54cc0dc1d57d1524b2918d2b44496c3b094d44ac1faae59ed4884f1971abd368dde1c98be539
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\Archivarius 3000\Help\Dutch\Create.htm1⤵PID:4292
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=3960 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:11⤵PID:4416
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=3964 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:11⤵PID:3216
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5788 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:81⤵PID:4352
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5268 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:11⤵PID:3180
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5332 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:81⤵PID:1852
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=3512 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:81⤵PID:3292
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5672 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:81⤵PID:2588