Overview

overview

7

Static

static

3

43d963bb3d...18.exe

windows7-x64

7

43d963bb3d...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Acrobat2Dict.dll

windows7-x64

1

Acrobat2Dict.dll

windows10-2004-x64

1

RunDict.exe

windows7-x64

4

RunDict.exe

windows10-2004-x64

7

TextExtrac...32.dll

windows7-x64

1

TextExtrac...32.dll

windows10-2004-x64

1

TextExtrac...64.dll

windows7-x64

1

TextExtrac...64.dll

windows10-2004-x64

1

WordBook.exe

windows7-x64

1

WordBook.exe

windows10-2004-x64

1

WordStroke...32.dll

windows7-x64

1

WordStroke...32.dll

windows10-2004-x64

1

WordStroke...64.dll

windows7-x64

1

WordStroke...64.dll

windows10-2004-x64

1

YodaoDict.dll

windows7-x64

3

YodaoDict.dll

windows10-2004-x64

3

YodaoDict.exe

windows7-x64

4

YodaoDict.exe

windows10-2004-x64

4

YodaoOcr.exe

windows7-x64

1

YodaoOcr.exe

windows10-2004-x64

1

YoudaoEH.exe

windows7-x64

1

YoudaoEH.exe

windows10-2004-x64

1

YoudaoGetWord32.dll

windows7-x64

1

YoudaoGetWord32.dll

windows10-2004-x64

1

YoudaoGetWord64.dll

windows7-x64

7

YoudaoGetWord64.dll

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    14-07-2024 02:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TextExtractorImpl64.dll

  • Size

    177KB

  • MD5

    7da77931e37e75e125b45e8178a11926

  • SHA1

    fe9f4775d1dc47e56870cac0f279b3d0387eae42

  • SHA256

    f3579609f1beacae23d0e1c32833c1f46ea1fe56686e1c99d728d181c0d0fd15

  • SHA512

    7f1d48ae2716dcb1faffbb6df7798c21638c80d5aa4f63a88d8d721a2eed2d6accac6bbb4d917ab0e2d5c5be77cf29c0775dc8e47fd94c9b0c51033e4a0029cb

  • SSDEEP

    3072:L5aXkG7qAvcjMMcO9Hc+k5cNkNmt/f9H0D6iTbdFLB0TuWQSHkoPBBivURSBc3yd:LcXkGl7mtt668LwfEuBiRo+3FmEx

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\TextExtractorImpl64.dll,#1
    1⤵
      PID:316

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads