Overview

overview

6

Static

static

3

winhex19�...se.dll

windows7-x64

1

winhex19�...se.dll

windows10-2004-x64

1

winhex19�...an.exe

windows7-x64

3

winhex19�...an.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PROGRAMFI...ME.url

windows7-x64

6

$PROGRAMFI...ME.url

windows10-2004-x64

6

$PROGRAMFI...tl.exe

windows7-x64

1

$PROGRAMFI...tl.exe

windows10-2004-x64

1

$PROGRAMFI...ard.js

windows7-x64

3

$PROGRAMFI...ard.js

windows10-2004-x64

3

$PROGRAMFI...pt.vbs

windows7-x64

1

$PROGRAMFI...pt.vbs

windows10-2004-x64

1

$PROGRAMFI...er.exe

windows7-x64

1

$PROGRAMFI...er.exe

windows10-2004-x64

1

$PROGRAMFI...or.exe

windows7-x64

1

$PROGRAMFI...or.exe

windows10-2004-x64

1

$PROGRAMFI...ME.url

windows7-x64

6

$PROGRAMFI...ME.url

windows10-2004-x64

6

$PROGRAMFI...tl.exe

windows7-x64

1

$PROGRAMFI...tl.exe

windows10-2004-x64

1

$PROGRAMFI...ard.js

windows7-x64

3

$PROGRAMFI...ard.js

windows10-2004-x64

3

$PROGRAMFI...pt.vbs

windows7-x64

1

$PROGRAMFI...pt.vbs

windows10-2004-x64

1

$PROGRAMFI...er.exe

windows7-x64

1

$PROGRAMFI...er.exe

windows10-2004-x64

1

$PROGRAMFI...or.exe

windows7-x64

1

$PROGRAMFI...or.exe

windows10-2004-x64

1

$SYSDIR/dokan.dll

windows7-x64

1

$SYSDIR/dokan.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    05-07-2024 16:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $PROGRAMFILES/Dokan/DokanLibrary/dokanctl.exe

  • Size

    19KB

  • MD5

    e40b0a2f59f793740329ed22d3b541f7

  • SHA1

    2bc325c247e35040841f6f5eb0cdc965a026c947

  • SHA256

    83b3bdeb96229130d83b7b813a73cb88e08f347e3488ec8b9fa09be135e5e590

  • SHA512

    846d2023862ff8e49506223d9016c56fce9931a5167ab85a89d7d59343837d00db20b0754b8880b4ff634b1a86a7ca24ce8fe5cfbcecff51183c481fdcbced96

  • SSDEEP

    192:fzbL1R1TGInfuQyPZdSb+xfILyIfIQXJfHCAtAO8cwEBnYe+PjPDHDJVg2bjymzt:fb1HUm+CZfICJHLtgcw4nYPLDHxF60/

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES\Dokan\DokanLibrary\dokanctl.exe
    "C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES\Dokan\DokanLibrary\dokanctl.exe"
    1⤵
      PID:2548

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads