Overview

overview

7

Static

static

3

10343bf892...18.exe

windows7-x64

7

10343bf892...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

AxsUtils.dll

windows7-x64

1

AxsUtils.dll

windows10-2004-x64

1

CheckForUpdates.dll

windows7-x64

1

CheckForUpdates.dll

windows10-2004-x64

1

Interop.eW...ol.dll

windows7-x64

1

Interop.eW...ol.dll

windows10-2004-x64

1

LLCryptoLib.dll

windows7-x64

1

LLCryptoLib.dll

windows10-2004-x64

1

LiteActivate.dll

windows7-x64

1

LiteActivate.dll

windows10-2004-x64

1

LiteErrorReport.dll

windows7-x64

1

LiteErrorReport.dll

windows10-2004-x64

1

LiteSerializer.dll

windows7-x64

1

LiteSerializer.dll

windows10-2004-x64

1

Microsoft....el.dll

windows7-x64

1

Microsoft....el.dll

windows10-2004-x64

1

Microsoft....op.dll

windows7-x64

1

Microsoft....op.dll

windows10-2004-x64

1

NCryptXL.exe

windows7-x64

1

NCryptXL.exe

windows10-2004-x64

1

data/examp...le.xls

windows7-x64

1

data/examp...le.xls

windows10-2004-x64

1

data/examp...s.xlsx

windows7-x64

1

data/examp...s.xlsx

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    26-06-2024 01:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CheckForUpdates.dll

  • Size

    56KB

  • MD5

    7a9228eeeaee70fc8e44e3d23e2b5241

  • SHA1

    ddd435d20ac865d3d091c0f4a7a269031615ffb1

  • SHA256

    4d48e3c20b1257e95c669cbe885886926a9b01a71548ca49a1d5ac3bd51bc413

  • SHA512

    197492ba7018ed25be6575831c511610d93de1ffc939f6ac2bacc983e181d0bdde03b0be53a8d3cf854956cb582a1339fb1d7fc54fcbd510f673870dca516593

  • SSDEEP

    768:/ieK488greUMInDnsIziLEVAc/YZQ/Oji7fNEj0p:/iygreUMInbxCE+xQ/OO7fNEj0p

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\CheckForUpdates.dll,#1
    1⤵
      PID:2984

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads