Overview
overview
8Static
static
3LoaderV6/A...wk.dll
windows10-2004-x64
1LoaderV6/A...ci.dll
windows10-2004-x64
1LoaderV6/A...ui.dll
windows10-2004-x64
1LoaderV6/WMPNSSUI.dll
windows10-2004-x64
1LoaderV6/loaderV6.exe
windows7-x64
1LoaderV6/loaderV6.exe
windows10-2004-x64
8LoaderV6/mpvis.dll
windows10-2004-x64
1LoaderV6/wmpnssci.dll
windows10-2004-x64
1Analysis
-
max time kernel
138s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19-07-2024 18:59
Static task
static1
Behavioral task
behavioral1
Sample
LoaderV6/Additions/wmpnetwk.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
LoaderV6/Additions/wmpnssci.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
LoaderV6/Additions/wmpnssui.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
LoaderV6/WMPNSSUI.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
LoaderV6/loaderV6.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
LoaderV6/loaderV6.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
LoaderV6/mpvis.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral8
Sample
LoaderV6/wmpnssci.dll
Resource
win10v2004-20240709-en
General
-
Target
LoaderV6/mpvis.dll
-
Size
186KB
-
MD5
e7dd6c9ed6db46b3d35cafaa4b7f640e
-
SHA1
2d65eefdfa5e71afb82c78bf4b264e87db91b958
-
SHA256
6edf856747573fc15433c0923efb93c3ebc29bb5957b373cbb798998381d9d4d
-
SHA512
828cf56539c5d2a8e10564c02cdef3a34781787e9414747ad87472b98997843be4e2007ed1aa22f013de0c445b5a9e8fcac8ef85a51df7bed5725f3881cea50d
-
SSDEEP
3072:eGGQ8wInYIcRSqMnAzvJC8KBoOGefHFcYBqI1r0flW/9YzG6:eC1InY9UqMAz4brxo4U
Malware Config
Signatures
-
Modifies registry class 6 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C58F1580-0DF3-401C-93B1-2D9DDA61CF04} regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C58F1580-0DF3-401C-93B1-2D9DDA61CF04}\1.0 regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C58F1580-0DF3-401C-93B1-2D9DDA61CF04}\1.0\0 regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C58F1580-0DF3-401C-93B1-2D9DDA61CF04}\1.0\HELPDIR regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C58F1580-0DF3-401C-93B1-2D9DDA61CF04}\1.0\0\win64 regsvr32.exe