Overview
overview
10Static
static
3setupV4.5.zip
windows10-2004-x64
1setupV4.5/...al.dll
windows10-2004-x64
3setupV4.5/...ds.dll
windows10-2004-x64
3setupV4.5/....5.exe
windows10-2004-x64
10setupV4.5/...er.dll
windows10-2004-x64
3setupV4.5/...dm.dll
windows10-2004-x64
3setupV4.5/...ix.sys
windows10-2004-x64
1setupV4.5/...pi.dll
windows10-2004-x64
3setupV4.5/acwow64.dll
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
274s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03/08/2024, 21:11
Static task
static1
Behavioral task
behavioral1
Sample
setupV4.5.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
setupV4.5/AcXtrnal.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
setupV4.5/AdaptiveCards.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
setupV4.5/SetupV4.5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
setupV4.5/SetupV4.5/AddressParser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
setupV4.5/SetupV4.5/Apphlpdm.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
setupV4.5/SetupV4.5/afunix.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
setupV4.5/SetupV4.5/appidapi.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
setupV4.5/acwow64.dll
Resource
win10v2004-20240802-en
General
-
Target
setupV4.5.zip
-
Size
15.0MB
-
MD5
0885d0c87354528911f49d315897fdd1
-
SHA1
5fe60967ed1afa998376f712e4fa8af3bca1fa88
-
SHA256
242d45f5768636258f25d282c74c933d2707fb13a7a54e893329ecc9e13ef50f
-
SHA512
ed957e4a9361f3af3b99d2347b049d6a20921fd0e802dc9e5b01f3ef8da92134056a5ef9170f817e7c6bf4ec08cf107ffbb59eae4f76a669ddedca71c7d0bae8
-
SSDEEP
393216:9KKjdAJ/kHfMO2/w1kBY8l5aFEYF/pAYfxXaI+vQkXLLcDlE610C9:9KKjKsHfMO2/wBFFF/pAYfR0vQk8DlNr
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\setupV4.5.zip1⤵PID:4396
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4072