Overview

overview

7

Static

static

1

6fae566b41...18.exe

windows7-x64

7

6fae566b41...18.exe

windows10-2004-x64

7

mcffplg.dll

windows7-x64

3

mcffplg.dll

windows10-2004-x64

3

saffplg.js

windows7-x64

3

saffplg.js

windows10-2004-x64

3

mcieplg.dll

windows7-x64

6

mcieplg.dll

windows10-2004-x64

3

x64/mcieplg.dll

windows7-x64

7

x64/mcieplg.dll

windows10-2004-x64

1

$TEMP/$_0_...st.exe

windows7-x64

$TEMP/$_0_...st.exe

windows10-2004-x64

$TEMP/$_0_...ui.dll

windows7-x64

1

$TEMP/$_0_...ui.dll

windows10-2004-x64

1

$TEMP/$_0_...ns.dll

windows7-x64

1

$TEMP/$_0_...ns.dll

windows10-2004-x64

1

mcsacins.dll

windows7-x64

3

mcsacins.dll

windows10-2004-x64

3

saInst.exe

windows7-x64

7

saInst.exe

windows10-2004-x64

7

$TEMP/$_0_...st.exe

windows7-x64

$TEMP/$_0_...st.exe

windows10-2004-x64

mcbrwctl.dll

windows7-x64

3

mcbrwctl.dll

windows10-2004-x64

3

mcsacore.exe

windows7-x64

3

mcsacore.exe

windows10-2004-x64

3

mcsacoreps.dll

windows7-x64

3

mcsacoreps.dll

windows10-2004-x64

3

saupkeep.dll

windows7-x64

3

saupkeep.dll

windows10-2004-x64

3

uninstall.exe

windows7-x64

3

uninstall.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    0s
  • max time network
    1s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25-07-2024 13:01

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: Failed to extract payload to C:\Users\Admin\AppData\Local\Temp -> open C:\Users\Admin\AppData\Local\Temp\$TEMP\$_0_ \MSADuc.cab: The system cannot find the path specified. image=C:\Users\Admin\AppData\Local\Temp\payload.exe command="C:\Users\Admin\AppData\Local\Temp\payload.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: This version of %1 is not compatible with the version of Windows you're running. Check your computer's system information to see whether you need a x86 (32-bit) or x64 (64-bit) version of the program, and then contact the software publisher.
Report Analysis Logs

General

  • Target

    $TEMP/$_0_ /mcinst.exe

  • Size

    307KB

  • MD5

    23b956cb2a60d49ef2ed9ab69e3882cf

  • SHA1

    51b77092db706d4f1431c1ab465382aadb434917

  • SHA256

    05d81cf175981e93cc01a91db56d34c3eb00490290e67aa654ad09b6fbaa7b28

  • SHA512

    5de45e0ebe9698d40e08fc3aa6b133b825da65b6080965b4105fe24d4321dbeb6e0939e876aa8018a3eeb7e38e4b6788d02170ac20471bada20b00860ea11ffa

  • SSDEEP

    6144:IA6rRQ5ky441Yw7q/Y4EODKZUYWGkpOxQDUAW:j6V+Nzl3O+ZUYinUAW

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads