Overview
overview
7Static
static
3DVResolve-RPC.v1.0.7z
windows7-x64
7DVResolve-RPC.v1.0.7z
windows10-2004-x64
7DVResolve-...s.json
windows7-x64
3DVResolve-...s.json
windows10-2004-x64
3DVResolve-...PC.exe
windows7-x64
1DVResolve-...PC.exe
windows10-2004-x64
1DVResolve-...PC.exe
windows7-x64
1DVResolve-...PC.exe
windows10-2004-x64
1DVResolve-...PC.pdb
windows7-x64
3DVResolve-...PC.pdb
windows10-2004-x64
3DVResolve-...g.json
windows7-x64
3DVResolve-...g.json
windows10-2004-x64
3DVResolve-...PC.dll
windows7-x64
1DVResolve-...PC.dll
windows10-2004-x64
1DVResolve-...on.dll
windows7-x64
1DVResolve-...on.dll
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
30-06-2024 21:31
Static task
static1
Behavioral task
behavioral1
Sample
DVResolve-RPC.v1.0.7z
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
DVResolve-RPC.v1.0.7z
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
DVResolve-RPC v1.0/DVResolve-RPC.deps.json
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
DVResolve-RPC v1.0/DVResolve-RPC.deps.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
DVResolve-RPC v1.0/DVResolve-RPC.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
DVResolve-RPC v1.0/DVResolve-RPC.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
DVResolve-RPC v1.0/DVResolve-RPC.exe
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
DVResolve-RPC v1.0/DVResolve-RPC.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
DVResolve-RPC v1.0/DVResolve-RPC.pdb
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
DVResolve-RPC v1.0/DVResolve-RPC.pdb
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
DVResolve-RPC v1.0/DVResolve-RPC.runtimeconfig.json
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
DVResolve-RPC v1.0/DVResolve-RPC.runtimeconfig.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
DVResolve-RPC v1.0/DiscordRPC.dll
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
DVResolve-RPC v1.0/DiscordRPC.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
DVResolve-RPC v1.0/Newtonsoft.Json.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
DVResolve-RPC v1.0/Newtonsoft.Json.dll
Resource
win10v2004-20240508-en
General
-
Target
DVResolve-RPC v1.0/DVResolve-RPC.exe
-
Size
163KB
-
MD5
5c2e8b94738262fcb3088c825889509d
-
SHA1
16a16978218888e4298776ee6f4c39cf4b79fdc8
-
SHA256
0aee63a30c6df7f79f940d05818ca46bcab5253a97679c8bf0e91cb22199f1cb
-
SHA512
890536418656c672e47b449702f79c6ebe12a97559efbd2fe48c7bf21d985f8f6e2610f9145e826c84ea29b1280fa782ada6d12049c630f71affc1d8bdcc9bdd
-
SSDEEP
3072:KiS4omp03WQthI/9S3BZi08iRQ1G78IVn28bSQcJI8ltnygq7Zh:KiS4ompB9S3BZi0a1G78IVjc2ctnyg6
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
DVResolve-RPC.exepid process 4420 DVResolve-RPC.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
DVResolve-RPC.exedescription pid process Token: SeDebugPrivilege 4420 DVResolve-RPC.exe