cdb19ed186a11c739cb70a09ff8a6432eadd01d0d5f641ff83e17efe2d45683d | Triage

Submit
Reports

Overview

overview

9

Static

static

7

Wind.rar

windows7-x64

3

Wind.rar

windows10-2004-x64

3

sigmaa/libcurl.dll

windows7-x64

1

sigmaa/libcurl.dll

windows10-2004-x64

1

sigmaa/windinject.exe

windows7-x64

9

sigmaa/windinject.exe

windows10-2004-x64

9

sigmaa/wor...le.txt

windows7-x64

1

sigmaa/wor...le.txt

windows10-2004-x64

1

sigmaa/wor...et.txt

windows7-x64

1

sigmaa/wor...et.txt

windows10-2004-x64

1

sigmaa/wor...le.txt

windows7-x64

1

sigmaa/wor...le.txt

windows10-2004-x64

1

sigmaa/wor..._1.txt

windows7-x64

1

sigmaa/wor..._1.txt

windows10-2004-x64

1

sigmaa/wor..._2.txt

windows7-x64

1

sigmaa/wor..._2.txt

windows10-2004-x64

1

sigmaa/wor...le.txt

windows7-x64

1

sigmaa/wor...le.txt

windows10-2004-x64

1

sigmaa/wor...le.txt

windows7-x64

1

sigmaa/wor...le.txt

windows10-2004-x64

1

sigmaa/wor...tefile

windows7-x64

1

sigmaa/wor...tefile

windows10-2004-x64

1

sigmaa/wor...le.txt

windows7-x64

1

sigmaa/wor...le.txt

windows10-2004-x64

1

sigmaa/wor...jr7.js

windows7-x64

3

sigmaa/wor...jr7.js

windows10-2004-x64

3

sigmaa/xxhash.dll

windows7-x64

1

sigmaa/xxhash.dll

windows10-2004-x64

1

sigmaa/zlib1.dll

windows7-x64

1

sigmaa/zlib1.dll

windows10-2004-x64

1

sigmaa/zstd.dll

windows7-x64

1

sigmaa/zstd.dll

windows10-2004-x64

1

Analysis

max time kernel
136s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2024 22:06

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Wind.rar

Resource

win7-20240704-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

Wind.rar

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

sigmaa/libcurl.dll

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

sigmaa/libcurl.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

sigmaa/windinject.exe

Resource

win7-20240704-en

evasion themida trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral6

Sample

sigmaa/windinject.exe

Resource

win10v2004-20240709-en

evasion themida trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

sigmaa/workspace/.tests/appendfile.txt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

sigmaa/workspace/.tests/appendfile.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

sigmaa/workspace/.tests/getcustomasset.txt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

sigmaa/workspace/.tests/getcustomasset.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

sigmaa/workspace/.tests/isfile.txt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

sigmaa/workspace/.tests/isfile.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

sigmaa/workspace/.tests/listfiles/test_1.txt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

sigmaa/workspace/.tests/listfiles/test_1.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

sigmaa/workspace/.tests/listfiles/test_2.txt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

sigmaa/workspace/.tests/listfiles/test_2.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

sigmaa/workspace/.tests/loadfile.txt

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

sigmaa/workspace/.tests/loadfile.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

sigmaa/workspace/.tests/readfile.txt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

sigmaa/workspace/.tests/readfile.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

sigmaa/workspace/.tests/writefile

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

sigmaa/workspace/.tests/writefile

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

sigmaa/workspace/.tests/writefile.txt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

sigmaa/workspace/.tests/writefile.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

sigmaa/workspace/UQMP9VS6AJxBjr7.js

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

sigmaa/workspace/UQMP9VS6AJxBjr7.js

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

sigmaa/xxhash.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

sigmaa/xxhash.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

sigmaa/zlib1.dll

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

sigmaa/zlib1.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

sigmaa/zstd.dll

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

sigmaa/zstd.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

sigmaa/xxhash.dll
Size

45KB
MD5

fd4a9c28c2b7b7f7cae985eed789f0ce
SHA1

44b51dd9a141f3dfcc090549e6c90071f8b55fb4
SHA256

dc354e7ea9046cadbed8645e4666975a523463500c877574f8e8306d958b7304
SHA512

b3ae3d523a1a2de93f05cfa856ac6984d444ee5180f862f0046be3acd02fb499400909449c7e47f764aea2d7d3863e42c7029b0cfc8803b79a91c9f56f3b8bc1
SSDEEP

768:f9otvM7DZ1LMDJdj+LVvgFlJus4zBYdXK3QDV:f9UEDLMDJxKM0scCXKA

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\sigmaa\xxhash.dll,#1
1⤵
PID:3504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy