a759f450c9f1e6815b3dccd0ffd77e183794334eaf60ba77fb0cd7e5a7d7fdda | Triage

Submit
Reports

Overview

overview

Static

static

TotalAV_Setup.exe

windows7-x64

4

TotalAV_Setup.exe

windows10-2004-x64

4

$APPDATA/T...wf.dat

windows7-x64

3

$APPDATA/T...wf.dat

windows10-2004-x64

3

$APPDATA/T...wf.dat

windows7-x64

3

$APPDATA/T...wf.dat

windows10-2004-x64

3

$APPDATA/T...en.dat

windows7-x64

3

$APPDATA/T...en.dat

windows10-2004-x64

3

$APPDATA/T...wf.dat

windows7-x64

3

$APPDATA/T...wf.dat

windows10-2004-x64

3

$APPDATA/T...mv.dat

windows7-x64

3

$APPDATA/T...mv.dat

windows10-2004-x64

3

$APPDATA/T...db.dat

windows7-x64

3

$APPDATA/T...db.dat

windows10-2004-x64

3

$APPDATA/T...ce.dll

windows7-x64

3

$APPDATA/T...ce.dll

windows10-2004-x64

3

$APPDATA/T...wf.dat

windows7-x64

3

$APPDATA/T...wf.dat

windows10-2004-x64

3

$APPDATA/T...mv.dat

windows7-x64

3

$APPDATA/T...mv.dat

windows10-2004-x64

3

$APPDATA/T...et.dat

windows7-x64

3

$APPDATA/T...et.dat

windows10-2004-x64

3

$APPDATA/T...df.dat

windows7-x64

3

$APPDATA/T...df.dat

windows10-2004-x64

3

$APPDATA/T...e.conf

windows7-x64

3

$APPDATA/T...e.conf

windows10-2004-x64

3

$APPDATA/T...sg.avr

windows7-x64

3

$APPDATA/T...sg.avr

windows10-2004-x64

3

$APPDATA/T...rt.crt

windows7-x64

1

$APPDATA/T...rt.crt

windows10-2004-x64

1

$APPDATA/T...README

windows7-x64

1

$APPDATA/T...README

windows10-2004-x64

1

Resubmissions

07-08-2024 12:20

240807-ph2rtsyejj 10

Analysis

max time kernel
92s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07-08-2024 12:20

Sharing

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

TotalAV_Setup.exe

Resource

win7-20240704-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

TotalAV_Setup.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aedroid_gwf.dat

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aedroid_gwf.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeexp_gwf.dat

Resource

win7-20240705-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeexp_gwf.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeheur_agen.dat

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral8

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeheur_agen.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeheur_gwf.dat

Resource

win7-20240705-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeheur_gwf.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeheur_mv.dat

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeheur_mv.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aelidb.dat

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aelidb.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeoffice.dll

Resource

win7-20240705-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeoffice.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeoffice_gwf.dat

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral18

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeoffice_gwf.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeoffice_mv.dat

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeoffice_mv.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeset.dat

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral22

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aeset.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aevdf.dat

Resource

win7-20240705-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/aevdf.dat

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/avupdate-savapilib-engine.conf

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/avupdate-savapilib-engine.conf

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/avupdate_msg.avr

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/avupdate_msg.avr

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/cacert.crt

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/cacert.crt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/on_access/README

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/on_access/README

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

$APPDATA/TotalAV/updates/SAVAPI 8.0.1/on_access/README
Size

526B
MD5

8c4504c84273e7ec7be437cbd723cabd
SHA1

a10fb9ed6dbaaae70116726f5c002df7ab94542d
SHA256

006380095181e4291a88e1edd5c00258cdecd1c34e9d07a54ebca0a67b621578
SHA512

5864d1a7140369857af54aa5db1437e1bcf2df127bb46f483a455f31a6950707b2a263e2911ae905cb659d4a47da4bb8f211c4df1a853525fa32d63385fa48c6

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\$APPDATA\TotalAV\updates\SAVAPI 8.0.1\on_access\README"
1⤵
PID:4636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy