Overview

overview

7

Static

static

3

EasyBCD2.4 (1).exe

windows7-x64

7

EasyBCD2.4 (1).exe

windows10-2004-x64

7

$0/The Neo...es.url

windows7-x64

1

$0/The Neo...es.url

windows10-2004-x64

1

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

EasyBCD.exe

windows7-x64

1

EasyBCD.exe

windows10-2004-x64

1

NeoSmart.L...on.dll

windows7-x64

1

NeoSmart.L...on.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

bin/BootGrabber.exe

windows7-x64

3

bin/BootGrabber.exe

windows10-2004-x64

3

bin/NST Do...er.exe

windows7-x64

1

bin/NST Do...er.exe

windows10-2004-x64

1

bin/NetTest.exe

windows7-x64

3

bin/NetTest.exe

windows10-2004-x64

3

bin/UtfRedirect.exe

windows7-x64

1

bin/UtfRedirect.exe

windows10-2004-x64

3

bin/bcdboot.exe

windows10-2004-x64

3

bin/bcdedit.exe

windows7-x64

3

bin/bcdedit.exe

windows10-2004-x64

3

bin/bootsect.exe

windows7-x64

3

bin/bootsect.exe

windows10-2004-x64

3

bin/udefra...el.dll

windows7-x64

3

Analysis

  • max time kernel
    16s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 22:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Newtonsoft.Json.dll

  • Size

    472KB

  • MD5

    0953851089821550ef013b487da3915a

  • SHA1

    7b4dfb7d547404fb6f3cc561d9475209aa2c6172

  • SHA256

    4a56ef352f84ad19c1b4486c7c9e64fef9a67c464c62e51bababa79cd2d89551

  • SHA512

    4a41a97527604042e1d28e2869aac1dea79da372ffc7e211415e45e4212a853971731cf4fc9595d81c4f4b824f8e7441c2ad6f2641d053cd783b264c83c29e86

  • SSDEEP

    6144:ePhUtuIXFCFuKXrzAoPymvVMzgIRHNR1P3VzCtbK5vablBFgOSjjyCR6QkMvh:luqCkpmtM5tbPwtbKaBoy46QkU

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Newtonsoft.Json.dll,#1
    1⤵
      PID:1108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads