Overview

overview

7

Static

static

1

6fae566b41...18.exe

windows7-x64

7

6fae566b41...18.exe

windows10-2004-x64

7

mcffplg.dll

windows7-x64

3

mcffplg.dll

windows10-2004-x64

3

saffplg.js

windows7-x64

3

saffplg.js

windows10-2004-x64

3

mcieplg.dll

windows7-x64

6

mcieplg.dll

windows10-2004-x64

3

x64/mcieplg.dll

windows7-x64

7

x64/mcieplg.dll

windows10-2004-x64

1

$TEMP/$_0_...st.exe

windows7-x64

$TEMP/$_0_...st.exe

windows10-2004-x64

$TEMP/$_0_...ui.dll

windows7-x64

1

$TEMP/$_0_...ui.dll

windows10-2004-x64

1

$TEMP/$_0_...ns.dll

windows7-x64

1

$TEMP/$_0_...ns.dll

windows10-2004-x64

1

mcsacins.dll

windows7-x64

3

mcsacins.dll

windows10-2004-x64

3

saInst.exe

windows7-x64

7

saInst.exe

windows10-2004-x64

7

$TEMP/$_0_...st.exe

windows7-x64

$TEMP/$_0_...st.exe

windows10-2004-x64

mcbrwctl.dll

windows7-x64

3

mcbrwctl.dll

windows10-2004-x64

3

mcsacore.exe

windows7-x64

3

mcsacore.exe

windows10-2004-x64

3

mcsacoreps.dll

windows7-x64

3

mcsacoreps.dll

windows10-2004-x64

3

saupkeep.dll

windows7-x64

3

saupkeep.dll

windows10-2004-x64

3

uninstall.exe

windows7-x64

3

uninstall.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/07/2024, 13:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/$_0_ /mcplgui.dll

  • Size

    166KB

  • MD5

    82a1a97820f29ff3cb3eb7eb9ecf86a9

  • SHA1

    80e364bf127a24f170406a1cd7fa86eb597a9081

  • SHA256

    7a45f37ebff001c94c2530e48b2b3c0697d1bac8fe30d89391a0a6cde2c1cec5

  • SHA512

    a74c1aa9e90d0f8d0d6eee1936068868ce60f794a31f58988759eef3ece6f79fd0787deee8c86c8e88663d51202c5e23aba2af4eddfef5307dd128bb5c5e0a3f

  • SSDEEP

    1536:/ZvvEFq8qS5hTMC5Lh1+OdDN3izA5+ELMO9/H8dkePlG7r7Z/N3hPiRa52KkbRMe:/iFx5hbNh1+OdDQQ+RXPlY9NhP/52dbL

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\payload.dll,#1
    1⤵
      PID:2064

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads