Overview

overview

8

Static

static

3

4ae6aa1589...18.exe

windows7-x64

7

4ae6aa1589...18.exe

windows10-2004-x64

7

$PLUGINSDI...gy.exe

windows7-x64

7

$PLUGINSDI...gy.exe

windows10-2004-x64

8

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...86.exe

windows7-x64

7

$PLUGINSDI...86.exe

windows10-2004-x64

7

Icons/proto_AIM.dll

windows7-x64

1

Icons/proto_AIM.dll

windows10-2004-x64

1

Icons/proto_ICQ.dll

windows7-x64

1

Icons/proto_ICQ.dll

windows10-2004-x64

1

Icons/proto_IRC.dll

windows7-x64

1

Icons/proto_IRC.dll

windows10-2004-x64

1

Icons/proto_MSN.dll

windows7-x64

1

Icons/proto_MSN.dll

windows10-2004-x64

1

Icons/proto_YAHOO.dll

windows7-x64

1

Icons/proto_YAHOO.dll

windows10-2004-x64

1

One Instan...er.exe

windows7-x64

1

One Instan...er.exe

windows10-2004-x64

1

dbtool.exe

windows7-x64

1

dbtool.exe

windows10-2004-x64

1

plugins/GG.dll

windows7-x64

3

plugins/GG.dll

windows10-2004-x64

3

plugins/IRC.dll

windows7-x64

3

plugins/IRC.dll

windows10-2004-x64

3

plugins/Yahoo.dll

windows7-x64

3

plugins/Yahoo.dll

windows10-2004-x64

3

plugins/advaimg.dll

windows7-x64

1

plugins/advaimg.dll

windows10-2004-x64

1

plugins/aim.dll

windows7-x64

3

plugins/aim.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-07-2024 18:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dbtool.exe

  • Size

    52KB

  • MD5

    e283c72d04c1a3241ad78355ae27b1f5

  • SHA1

    d8f079b794fa04c4ecb43a2758b0bad015d071bf

  • SHA256

    7bf149b3d0bf57cb52b3ae5758c3391e00862f88a2ca87ce632c14d5d2fdb293

  • SHA512

    2229a6e1455beda1dded32ad9a62d587eab0bae30120a0134c068f5ca1b3b124cdbcf172267f35ca4ac97ac6d9b9f55e6c491dd766c448cf561f0c16f9bf73d0

  • SSDEEP

    768:4/l/9sscYks6qtFBw0PJArxkQp8zT9g8UhQ//mows80:G/ctqLBXPKVuHmo/80

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\dbtool.exe
    "C:\Users\Admin\AppData\Local\Temp\dbtool.exe"
    1⤵
      PID:4824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads