Overview

overview

10

Static

static

10

ScanGuard_Setup.exe

windows11-21h2-x64

$APPDATA/S...te.exe

windows11-21h2-x64

1

$APPDATA/S...io.dll

windows11-21h2-x64

3

$APPDATA/S...lt.sys

windows11-21h2-x64

1

$APPDATA/S...bb.sys

windows11-21h2-x64

1

$APPDATA/S...gr.sys

windows11-21h2-x64

1

$APPDATA/S...io.dll

windows11-21h2-x64

3

$APPDATA/S...lt.sys

windows11-21h2-x64

1

$APPDATA/S...bb.sys

windows11-21h2-x64

1

$APPDATA/S...gr.sys

windows11-21h2-x64

$APPDATA/S...io.dll

windows11-21h2-x64

3

$APPDATA/S...lt.sys

windows11-21h2-x64

1

$APPDATA/S...bb.sys

windows11-21h2-x64

1

$APPDATA/S...gr.sys

windows11-21h2-x64

1

$APPDATA/S...io.dll

windows11-21h2-x64

3

$APPDATA/S...lt.sys

windows11-21h2-x64

1

Microsoft....cs.dll

windows11-21h2-x64

1

Microsoft....es.dll

windows11-21h2-x64

1

Microsoft....er.dll

windows11-21h2-x64

1

Microsoft.CSharp.dll

windows11-21h2-x64

1

Microsoft....86.dll

windows11-21h2-x64

1

Microsoft....ns.dll

windows11-21h2-x64

1

Microsoft....er.dll

windows11-21h2-x64

1

Microsoft....on.dll

windows11-21h2-x64

1

Microsoft....ns.dll

windows11-21h2-x64

1

Microsoft....on.dll

windows11-21h2-x64

1

Microsoft....ns.dll

windows11-21h2-x64

1

Microsoft....ng.dll

windows11-21h2-x64

1

Microsoft....ns.dll

windows11-21h2-x64

1

Microsoft....es.dll

windows11-21h2-x64

1

Microsoft....ns.dll

windows11-21h2-x64

1

Microsoft....re.dll

windows11-21h2-x64

1

Resubmissions

10-07-2024 23:05

240710-223vfsvemm 10

Analysis

  • max time kernel
    1502s
  • max time network
    1488s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    10-07-2024 23:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $APPDATA/ScanGuard/updates/SAVAPI 11.0.1/on_access/win32/win7/avkmgr.sys

  • Size

    35KB

  • MD5

    20894c53c0b9db8f86993d9ecb78f9d5

  • SHA1

    7c18c5b571c906535d393a5165379f6316143107

  • SHA256

    d5e35a021e2a8e676b9034a2c712907f170d3f5b7315d516f317f51cd03ddd06

  • SHA512

    7fbd637c64a3ed5ce202864197ee26e0d97f84be8bb0bfd5bdbfcf500f370764545489de8d83c347e5f15a414bf5d614377a60983803924935453266f8af5d24

  • SSDEEP

    384:pSxWv2ZhZ4mAjuPUEA1aVrFiFdWeFuu9BTQe7r/nYPLvdJUHeMPP:gS8ZIuPwoz4dWeFuubQEr/KdkP

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\$APPDATA\ScanGuard\updates\SAVAPI 11.0.1\on_access\win32\win7\avkmgr.sys"
    1⤵
      PID:1764
      • C:\Users\Admin\AppData\Local\Temp\$APPDATA\ScanGuard\updates\SAVAPI 11.0.1\on_access\win32\win7\avkmgr.sys
        "C:\Users\Admin\AppData\Local\Temp\$APPDATA\ScanGuard\updates\SAVAPI 11.0.1\on_access\win32\win7\avkmgr.sys"
        2⤵
          PID:4972

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4972-0-0x0000000000010000-0x000000000001C000-memory.dmp

        Filesize

        48KB

        Download