Overview

overview

7

Static

static

3

2bdd82a68c...18.exe

windows7-x64

7

2bdd82a68c...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...eg.dll

windows7-x64

3

$PLUGINSDI...eg.dll

windows10-2004-x64

3

$PLUGINSDIR/time.dll

windows7-x64

3

$PLUGINSDIR/time.dll

windows10-2004-x64

3

$PLUGINSDI...vi.dll

windows7-x64

3

$PLUGINSDI...vi.dll

windows10-2004-x64

3

WingSearcher.exe

windows7-x64

1

WingSearcher.exe

windows10-2004-x64

1

WingSub.exe

windows7-x64

1

WingSub.exe

windows10-2004-x64

1

WingSvrs.exe

windows7-x64

1

WingSvrs.exe

windows10-2004-x64

1

msvcp100.dll

windows7-x64

3

msvcp100.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-07-2024 09:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    WingSvrs.exe

  • Size

    10KB

  • MD5

    7b9ed09fa5d96eec6ec2d330b49c5b61

  • SHA1

    e3a7b005ab9b25250e598d85e238db53f755bd8e

  • SHA256

    a48ac4c9801ce568a566f2501552419ac7216e5bb0da7af27571178e1ff6dfed

  • SHA512

    b0f39baf0b8608788a58348d52ad9bf2709c6e1eba67cb65e3926859cc3a84c97b95a58349a6fbbb8dc0feec01baca38518e4f6fc99a4cc9e7b07f92930ea0c6

  • SSDEEP

    192:Mngv8awzGfs6KAYEHFnFDar+52jSzrRXVQG6JaP+2:RJ2Us6KAvHrar+EjSH1Vr+2

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\WingSvrs.exe
    "C:\Users\Admin\AppData\Local\Temp\WingSvrs.exe"
    1⤵
      PID:440

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads