169605839aebe681cc8f32304083932a0a710dad4d24c900a9dc17d92f6efd29 | Triage

Submit
Reports

Overview

overview

4

Static

static

3

FiddlerSetup.exe

windows7-x64

4

FiddlerSetup.exe

windows10-2004-x64

4

$PLUGINSDI...up.exe

windows7-x64

3

$PLUGINSDI...up.exe

windows10-2004-x64

3

RunNsisUni...rs.bat

windows7-x64

1

RunNsisUni...rs.bat

windows10-2004-x64

1

ScriptEdit...cs.dll

windows7-x64

1

ScriptEdit...cs.dll

windows10-2004-x64

1

ScriptEdit...or.dll

windows7-x64

1

ScriptEdit...or.dll

windows10-2004-x64

1

ScriptEdit...on.dll

windows7-x64

1

ScriptEdit...on.dll

windows10-2004-x64

1

ScriptEdit...or.dll

windows7-x64

1

ScriptEdit...or.dll

windows10-2004-x64

1

ScriptEdit...rs.dll

windows7-x64

1

ScriptEdit...rs.dll

windows10-2004-x64

1

ScriptEdit...ax.dll

windows7-x64

1

ScriptEdit...ax.dll

windows10-2004-x64

1

Scripts/Fi...on.dll

windows7-x64

1

Scripts/Fi...on.dll

windows10-2004-x64

1

Scripts/Fi...on.dll

windows7-x64

1

Scripts/Fi...on.dll

windows10-2004-x64

1

Scripts/Fi...ol.dll

windows7-x64

1

Scripts/Fi...ol.dll

windows10-2004-x64

1

Scripts/Fi...es.dll

windows7-x64

1

Scripts/Fi...es.dll

windows10-2004-x64

1

Scripts/QW...on.dll

windows7-x64

1

Scripts/QW...on.dll

windows10-2004-x64

1

Scripts/QW...or.dll

windows7-x64

1

Scripts/QW...or.dll

windows10-2004-x64

1

Scripts/QW...rs.dll

windows7-x64

1

Scripts/QW...rs.dll

windows10-2004-x64

1

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 20:37

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

FiddlerSetup.exe

Resource

win7-20240611-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

FiddlerSetup.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/FiddlerSetup.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/FiddlerSetup.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

RunNsisUninstallers.bat

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

RunNsisUninstallers.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

ScriptEditor/Analytics.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

ScriptEditor/Analytics.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

ScriptEditor/GA.Analytics.Monitor.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

ScriptEditor/GA.Analytics.Monitor.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

ScriptEditor/QWhale.Common.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

ScriptEditor/QWhale.Common.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

ScriptEditor/QWhale.Editor.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

ScriptEditor/QWhale.Editor.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

ScriptEditor/QWhale.Syntax.Parsers.dll

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

ScriptEditor/QWhale.Syntax.Parsers.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

ScriptEditor/QWhale.Syntax.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

ScriptEditor/QWhale.Syntax.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Scripts/FiddlerOrchestra.Addon.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Scripts/FiddlerOrchestra.Addon.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Scripts/FiddlerOrchestra.Connection.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Scripts/FiddlerOrchestra.Connection.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Scripts/FiddlerOrchestra.Protocol.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Scripts/FiddlerOrchestra.Protocol.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Scripts/FiddlerOrchestra.Utilities.dll

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Scripts/FiddlerOrchestra.Utilities.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Scripts/QWhale.Common.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Scripts/QWhale.Common.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Scripts/QWhale.Editor.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Scripts/QWhale.Editor.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Scripts/QWhale.Syntax.Parsers.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Scripts/QWhale.Syntax.Parsers.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Scripts/FiddlerOrchestra.Protocol.dll
Size

23KB
MD5

04b7e5ebb82798a3a07eb8f4cd658228
SHA1

855fc43c08e7d2f568ae7e8a15f24ac7d8475fde
SHA256

449effe1d5f6f5dd5819811dddf233dc1b53a9a019a80db71706b80347584425
SHA512

fab03af027e5d25399dfa66de66054a643ee9a1161422a3072e8209ad66484384cd0b791373c609ff3daf60403b02bf0411c863b145b816aae8f6fe5dac181c1
SSDEEP

384:7DboBjiEBhJxu9K3nrSnYPLLR/XF8b/jR/XFYInIufeday:OE9AnWKdF8bbdFHnJfKay

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Scripts\FiddlerOrchestra.Protocol.dll,#1
1⤵
PID:4536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy