Overview
overview
1Static
static
1RTKUWP/Mic...e.appx
windows7-x64
RTKUWP/Mic...e.appx
windows10-2004-x64
concrt140_app.dll
windows7-x64
1concrt140_app.dll
windows10-2004-x64
1msvcp140_1_app.dll
windows7-x64
1msvcp140_1_app.dll
windows10-2004-x64
1msvcp140_2_app.dll
windows7-x64
1msvcp140_2_app.dll
windows10-2004-x64
1msvcp140_app.dll
windows7-x64
1msvcp140_app.dll
windows10-2004-x64
1msvcp140_a...pp.dll
windows7-x64
1msvcp140_a...pp.dll
windows10-2004-x64
1msvcp140_c...pp.dll
windows7-x64
1msvcp140_c...pp.dll
windows10-2004-x64
1vcamp140_app.dll
windows7-x64
1vcamp140_app.dll
windows10-2004-x64
1vccorlib140_app.dll
windows7-x64
1vccorlib140_app.dll
windows10-2004-x64
1vcomp140_app.dll
windows7-x64
1vcomp140_app.dll
windows10-2004-x64
1vcruntime140_app.dll
windows7-x64
1vcruntime140_app.dll
windows10-2004-x64
1RTKUWP/Mic...e.appx
windows7-x64
RTKUWP/Mic...e.appx
windows10-2004-x64
concrt140_app.dll
windows7-x64
1concrt140_app.dll
windows10-2004-x64
1msvcp140_1_app.dll
windows7-x64
1msvcp140_1_app.dll
windows10-2004-x64
1msvcp140_2_app.dll
windows7-x64
1msvcp140_2_app.dll
windows10-2004-x64
1msvcp140_app.dll
windows7-x64
1msvcp140_app.dll
windows10-2004-x64
1General
-
Target
RealtekAudioControl_1.44.299-offline.zip
-
Size
11.0MB
-
Sample
240725-t5wxbavfjf
-
MD5
b96b4749beb8a7cf8513bb60a6babfcb
-
SHA1
645595b1d078a8735b7c5942953994afa4539f3d
-
SHA256
314c02b4547c712b65a490c1297ebd09260b51d89ce94bd3da191938f178e79e
-
SHA512
e0f32ec55656e614fad1d08e66b795217514ade693d06a8c36c48f1af7f8c587056c61d4c10c7e7f0dcd0d8035f2b349b62f4ad11c3eb314692e5f1029b319cb
-
SSDEEP
196608:7y/QnsZUadSSuFbZd8RT6IHb/CmmfLyVZBnt1gPxKXQMOUMVEGv/wRyB:7y/GsZobZd8wIHb1mfLyVZL8KTMVZH
Static task
static1
Behavioral task
behavioral1
Sample
RTKUWP/Microsoft.VCLibs.140.00_14.0.32530.0_arm64__8wekyb3d8bbwe.appx
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
RTKUWP/Microsoft.VCLibs.140.00_14.0.32530.0_arm64__8wekyb3d8bbwe.appx
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
concrt140_app.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
concrt140_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
msvcp140_1_app.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
msvcp140_1_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
msvcp140_2_app.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
msvcp140_2_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
msvcp140_app.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
msvcp140_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
msvcp140_atomic_wait_app.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
msvcp140_atomic_wait_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
msvcp140_codecvt_ids_app.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
msvcp140_codecvt_ids_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
vcamp140_app.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
vcamp140_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
vccorlib140_app.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
vccorlib140_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
vcomp140_app.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
vcomp140_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
vcruntime140_app.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
vcruntime140_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
RTKUWP/Microsoft.VCLibs.140.00_14.0.32530.0_arm__8wekyb3d8bbwe.appx
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
RTKUWP/Microsoft.VCLibs.140.00_14.0.32530.0_arm__8wekyb3d8bbwe.appx
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
concrt140_app.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
concrt140_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
msvcp140_1_app.dll
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
msvcp140_1_app.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
msvcp140_2_app.dll
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
msvcp140_2_app.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
msvcp140_app.dll
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
msvcp140_app.dll
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
RTKUWP/Microsoft.VCLibs.140.00_14.0.32530.0_arm64__8wekyb3d8bbwe.Appx
-
Size
1.5MB
-
MD5
b553c97efb588d4e01d01b3d1b244b18
-
SHA1
346dbb6413c29ba8e464d459229a2d4871e0c628
-
SHA256
0fea426d0bc75a02bcd9528969cf19dfbe13c2cbb4e21d78380c6ce1ec78a92a
-
SHA512
47b12169d99d9d183cacf0b2bb651561ed7ea386efdcf48844fef8f05e730084b62a1e1bf3dc8fb3ef221b4e7386bbf659d780ad9389c8b47c8c3c377fe0b7f8
-
SSDEEP
49152:C4OUUi40f9NvKxs2XahdnBnKWeJcuSUtFBDmwFCvzi:CXOljvj2KFBOSUtFBDxFCvW
Score1/10 -
-
-
Target
concrt140_app.dll
-
Size
689KB
-
MD5
c2912600b0d868bb92682785ea28c971
-
SHA1
1ebef854ba78dae38bb121fcdadbf78256acfe8f
-
SHA256
adbba95326111b1febdcb4efa4b3f6516269552b14ae49c94f729cdecf09d24d
-
SHA512
89726c7a0769078d846ff6eb452de9ac6b6b90466c5e5299d2d6c807b26b087c9cb7a11e4498a76e8798543a3f007d2c8b975ec3d5bae36717aef3019c5b2653
-
SSDEEP
12288:rXph98lYuqm/2UrigtJk5t2DFdpWOVZN52q/Mzwz+S/m:qqm0CJ8mpLFkzwz+S/m
Score1/10 -
-
-
Target
msvcp140_1_app.dll
-
Size
46KB
-
MD5
cd462c6f95fae9bee3d07ce3b1ff6701
-
SHA1
dc05d94dcca4d9031a0bfb637e5ebcc90b614826
-
SHA256
5c0a7c209da1728372ec3171dd01ad21afcf25b4ed06a1397f2a3b929ce7d41b
-
SHA512
3caacf245b95b977eb414e86b7ab7ea8df16ff3b6970566f1f63500752c5b2c265c761a3f6dadb06f1962bd663e83e5adaff1d78eacc855b173261f5073754fe
-
SSDEEP
384:8JV9boqBanIkmhR7eHXeyGDUDWfLF8WMqvV0S7dwWc4GWOF2Qe89g1cEwxR00R9k:09heJeLMKV0cdnK2Q3CcEwP049zO6I
Score1/10 -
-
-
Target
msvcp140_2_app.dll
-
Size
517KB
-
MD5
3cf6431255e497aa5b963a4ff09acf7f
-
SHA1
67ba0ef82d9c76ff88a236b6dc6fa2beb66e720b
-
SHA256
3efb92e76fbd626db3bf45bf779eae7b6d1d6c4cbb75ec8a1ecf29df34625ceb
-
SHA512
e93cf6e4941d722e3df196368d17c963c8b836737b9836c737cce81da1c29c5602709d836a74475d9fd8d48f4e7665678d06d02fc9672adf7836287d7d58911f
-
SSDEEP
6144:N+jjTE8TFncuD1vBBFSTrFZQjovbyUN+jMJVY3TNmandaKnTWSWPFsp:N+jjTvcupvBB+rF6jTFjNTTWSWE
Score1/10 -
-
-
Target
msvcp140_app.dll
-
Size
1.3MB
-
MD5
798249aaa7a931268b6a810b0b4f297a
-
SHA1
2720979a106e3d5797dad6fe9e2e7a27df81365b
-
SHA256
eb3c2a49b2d6aa5f96b083d61a1367f7ae0117582c4dd3e08e0f2c3a2ea9ac16
-
SHA512
6e0a3303f16e50cfa9002de5b2f92d41b484205eb7632cdd86b5a2be444c1fec4bcb5e141181ed40975f304892382bee8855ce17a6e14af692bab98e8ddec31e
-
SSDEEP
24576:TI0d0h5oWQEKZm+jWodEEvQEKZm+jWodEEqulB:t0h5rEclB
Score1/10 -
-
-
Target
msvcp140_atomic_wait_app.dll
-
Size
83KB
-
MD5
c6d645b23351605d153adfc493450389
-
SHA1
656b7a8a3f7b92e454b4b01b6e2df9db1e6e5b82
-
SHA256
2ad6e3d6a5d58abd446f08a62d0e4a6546bf9c00150eff0abd6faf8f1bfb0aa2
-
SHA512
328463e59b79efb0cdd0767b95a79cb8f1b59ac3d7f32b29db18d3d473713d56927baf55fcee5a90fd8ef0dfa530f6f75f358b740bd5180f61f2dd6bddf2d935
-
SSDEEP
1536:/j9gkq9g6UAemdFeSKOWeV+jxfFYA1JRckPP7DGEqzBN8CIojzw:/j9G9g6UAnQDGrzf3jc
Score1/10 -
-
-
Target
msvcp140_codecvt_ids_app.dll
-
Size
40KB
-
MD5
15d13966e30a6619c4fc6bb1daf3c899
-
SHA1
a9f078975f805d33615e6616f04ec07c0f9b8d98
-
SHA256
caa7a0401d773d80fe50da9b3332b8847baa8436de2d6e15e56d3d8078158014
-
SHA512
698276d9aa3cd8ca3d1a736d3b2ccc2af960e4483458209652616d1b38492409aa604c2f806a150f0a27dade23c9061836b1be3aede89d4148c8a0f4bd771782
-
SSDEEP
384:WNbUqWn5znhNlM9+DNLz+YZBzversWioiWA1ml7Rm9g1A/G5G7YDR9za+fpYJ4:GuNl6y77eZE1mlGCA/+G7Yl9zHOJ4
Score1/10 -
-
-
Target
vcamp140_app.dll
-
Size
993KB
-
MD5
3b4e5152b9f567d903e02ea5195b7517
-
SHA1
19522d391436a282243c9dee97ba6c398c154f14
-
SHA256
a43ee7d01a005ba5810144446ddf5ec62d9392b15444cc1d69b28afdf748c490
-
SHA512
a955d305cfe9a649165220cdc6817cacc81cc16038a6159e46fe10222e5b912ec5f8470a9cde0b389d84613d0f64661db4eff899da0d8c89b4cdb2abcf710e73
-
SSDEEP
12288:a1T3nIrl8ptaKiVql2yj3PZ68PKr8NdkpbzFmvXdLIsG3:3mLaK968PPNdkpefG3
Score1/10 -
-
-
Target
vccorlib140_app.dll
-
Size
852KB
-
MD5
0036e73aca1d5e0523904602b8a763c0
-
SHA1
ef8f8d260b5517ebefed597fbc6d200b0d551470
-
SHA256
55dd0f2bceec1a95e1f444ed72ae393184668839a4956a41be18b064a0fe9328
-
SHA512
18c1e866aaa813f4df4236abe2900e67ceb46a3a689dee51d705e91797eb0cace8cadf2ddcf7e4a35f039c026340f6e94908c7e1f59d679f486f6695eb77429a
-
SSDEEP
6144:Dp43PmSaimYaNyYOEwH2URPDCdq2gMK7fxHo9r5S4QJcPscDUV:Dc7a1NylEwHbeDd8cDUV
Score1/10 -
-
-
Target
vcomp140_app.dll
-
Size
130KB
-
MD5
e7d4a5106ed49e47590dfc9fa587b5b5
-
SHA1
45eab55854da5470cb4fb5756ad35a95ad2621d2
-
SHA256
065b252f852a7ce56dfa515246cb2d293783e60cba36115251071351ed7e12fb
-
SHA512
13ecd83987f888eaabcd8987fb22c8e324dd4e9a66729a88cc23d1bcfbffd2e5c0e98022d57b11fe55a73d52f6e588b9832598daca96379b9632d3e33745029c
-
SSDEEP
3072:pkWParc0l8KViF8sMhoUyjoF0i5/Ek59SNEf/PN:pkWPkc02kiCsMehwNyk59D/V
Score1/10 -
-
-
Target
vcruntime140_app.dll
-
Size
191KB
-
MD5
5b1b42b2d8044bb66e1cd0033ca323f5
-
SHA1
dfdb97bb7249bef0b8a3a43122156e8d0670d8dc
-
SHA256
fbf9d36839adf92547861d6555b1b6baeed21fadf33df15402bb1b1447f86ef3
-
SHA512
ac13633ce94baeb9b379205f314828b86b4dcb6f0fec8380517a6edd48bd7728a0d07ad330f65a546297f31c4b6714f3f72d04f00067b48060754c7ff6f8c67e
-
SSDEEP
3072:01F/HnNIjLp0sZG0hIGPA2K/tn/nR32qSTmGHkcZ0/kgecbWecbTif5aivrt:0vC05mIGPG/R3GmGE2UkgecbWecbTifx
Score1/10 -
-
-
Target
RTKUWP/Microsoft.VCLibs.140.00_14.0.32530.0_arm__8wekyb3d8bbwe.Appx
-
Size
815KB
-
MD5
c6ecb01450a39dd3aa403a3cc19af0ea
-
SHA1
7cc0dd068461575065b509e947ed7cf4488b33ba
-
SHA256
70ea39797e8dd768c1788ade54fa45d9b94fd7d359a60f7d367f488cde28a9c6
-
SHA512
91572ce75e52662f80e193e12c3589edb92e5c48cb6ba0d74f39c4d53a80a7ca5b6b873e01bc4af38cf73619fbaea3cacd88f67faee5c5cbbde0d0cc9a46d47f
-
SSDEEP
24576:M00rtj3o3aUG4GaJSWjrR4JxuuAGNNUWSmmM5a:10a3HG4GEIFAGNPQWa
Score1/10 -
-
-
Target
concrt140_app.dll
-
Size
265KB
-
MD5
61f468ebc6afa5c113553d839add0b77
-
SHA1
4755ca66f6131cfb78f2c777c52d1b6e5fb7b2cd
-
SHA256
24cd435ed743b3f138747178fd657f37a5d308ec9871bb2b73cf2572093ffc77
-
SHA512
f4abc776aedcf1d9a8335c3ee830a109f5e2b63bd6c3ca4377c57f86b68515059a311ee1deaa3f6e86fcbeae2c991825b9946dc0ca7f9915e02254f9432c0e84
-
SSDEEP
3072:8jBZzAYbaZ2wkcqw9jI7L8dskxwu0tT4r4azQ5pYM8/+j/mr3xpHX+kbRLLZsEfT:ivQ2gqOssdPe4RiaWVF+AV2zr7zScTdj
Score1/10 -
-
-
Target
msvcp140_1_app.dll
-
Size
22KB
-
MD5
7ac1b7bd63aceeff36a2c03c5307aaa7
-
SHA1
8e063171921a52e88f8e7721b7e0c864ab0bddfe
-
SHA256
c5006558f98ada734c25b3a00e39c4c86c312e6c72eb31b27df97bade02d5bea
-
SHA512
616698fcb238b19877c078c49d9bab38942945578268fe84e7364548e6a428a6cc9303c804da959e0aa2e6d3a785869ec39e6542b7e376ee19cc58d09696df97
-
SSDEEP
384:ul6utuOyGRdr7tqExs97HFWc4GWcyYp+2Qe89g1cMFNGaR9zrhzq:XnqvtFxs97HgrYo2Q3Cc6UW9z9zq
Score1/10 -
-
-
Target
msvcp140_2_app.dll
-
Size
250KB
-
MD5
19f565106ecfcc2ef3404a28889516ff
-
SHA1
a53c3c731380012916aa230ddc74dba0acca8840
-
SHA256
621016e7275d4517f4d415158be45606b7e4aa725640c5b1673343bc43b5774b
-
SHA512
6cf2bf894791de434f62d803affd6c9944b0e37f335bb662ae2ffff8ffee8f27f2f96f3ceb85f3dfb12edd3ad391aae4a92e3f74abb73aa5bea48c654a1100aa
-
SSDEEP
6144:1DMPmegUMn3ICyzK4ET55KGbjcEOpW7ORWo7cS:1i8zdyzK465X19SRWEj
Score1/10 -
-
-
Target
msvcp140_app.dll
-
Size
544KB
-
MD5
dff8170cfc6dd9e809f3be047535fdda
-
SHA1
bb09b0f95d1d0e1e9ef62808ad610e82616ffa20
-
SHA256
1c2b348b2813ea930d7683c7f8e38a7acc9a9491fe31feab22c756a9b4f358c4
-
SHA512
b6b18f0aadc333f8558ada7aaa2b64f12ea6859fc8f83397e8f4c756c7b330704ba8de1c24851df239f9b71fd51bef68f6b0283cc9c6fd5b41d43890c212a140
-
SSDEEP
12288:3QZWzmnrSSqhrjP0OzhUgiW6QR7t5s0rCEoYlDQ2qis4OyTk/b:BMes70rCEoYlDQ2qiVOyab
Score1/10 -