2dd2d390dbaed8ee38fe50869df0d042d42d0f58b7ec9d6c58a986d28455a95c

Submit
Reports

Overview

overview

Static

static

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....up.dll

windows11-21h2-x64

MicrosoftS...nt.dll

windows11-21h2-x64

MicrosoftS...pt.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...el.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...ts.dll

windows11-21h2-x64

MicrosoftS...es.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...ly.dll

windows11-21h2-x64

MicrosoftS...tp.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Analysis

max time kernel
145s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
23-07-2024 15:04

Sharing

Copy URL

Twitter E-mail

Static task

static1

qr link

2 signatures

Behavioral task

behavioral1

Sample

Microsoft.6365217CE6EB4_102.2406.5001.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Microsoft.6365217CE6EB4_102.2406.5001.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Microsoft.6365217CE6EB4_102.2406.5002.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Microsoft.UI.Xaml.Markup.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

MicrosoftSecurityApp/EcsClient.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

MicrosoftSecurityApp/Microsoft.AI.Agent.Intercept.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

MicrosoftSecurityApp/Microsoft.AI.DependencyCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

MicrosoftSecurityApp/Microsoft.AI.EventCounterCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

MicrosoftSecurityApp/Microsoft.AI.PerfCounterCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

MicrosoftSecurityApp/Microsoft.AI.ServerTelemetryChannel.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

MicrosoftSecurityApp/Microsoft.AI.WindowsServer.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

MicrosoftSecurityApp/Microsoft.ApplicationInsights.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

MicrosoftSecurityApp/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

MicrosoftSecurityApp/Microsoft.ConsumerSecurity.Client.OneAuthHandler.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.Binder.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

MicrosoftSecurityApp/Microsoft.Extensions.DependencyInjection.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

MicrosoftSecurityApp/Microsoft.Extensions.DependencyInjection.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

MicrosoftSecurityApp/Microsoft.Extensions.FileProviders.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Hosting.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Http.Polly.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Http.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Logging.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Logging.Configuration.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Microsoft.6365217CE6EB4_102.2406.5002.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

MicrosoftSecurityApp/EcsClient.dll
Size

62KB
MD5

60312bf6533fa5aaf8c85c20f53d0602
SHA1

7026eec2594e47ac586888f27fc675a65fe0c37d
SHA256

c71be037b5b9053796cd3336246e866dbd7c907d14e8be4e3279f59ae086ad63
SHA512

8d27530ceccaae7e43403f268ca9b37277d09fb389b53206305be162526120279e4471cd48e3f511bafe423f2f5b90e972f2e83523f7de5c40e6a2105bca6ece
SSDEEP

768:D8fvbTFjnaCd9FQLntSjAcU8fcCFIwdBFpIfNcJNMLcJjWGTma3+lJ6049zOU:D833Fja8wtSUdoFJDCcJjDTB+lJTwzOU

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\MicrosoftSecurityApp\EcsClient.dll,#1
1⤵
PID:244

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads