Overview

overview

6

Static

static

3

.hackus/Settings.cfg

windows7-x64

3

.hackus/Settings.cfg

windows10-2004-x64

3

DotNetZip.dll

windows7-x64

1

DotNetZip.dll

windows10-2004-x64

1

Entropy.dll

windows7-x64

1

Entropy.dll

windows10-2004-x64

1

HMC.exe

windows7-x64

6

HMC.exe

windows10-2004-x64

6

HandyControl.dll

windows7-x64

1

HandyControl.dll

windows10-2004-x64

1

IpMatcher.dll

windows7-x64

1

IpMatcher.dll

windows10-2004-x64

1

MailBee.NET.dll

windows7-x64

1

MailBee.NET.dll

windows10-2004-x64

1

Microsoft....es.dll

windows7-x64

1

Microsoft....es.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Presentati...ta.dll

windows7-x64

3

Presentati...ta.dll

windows10-2004-x64

3

Presentati...ml.dll

windows7-x64

3

Presentati...ml.dll

windows10-2004-x64

3

RegexMatcher.dll

windows7-x64

1

RegexMatcher.dll

windows10-2004-x64

1

SharpCompress.dll

windows7-x64

1

SharpCompress.dll

windows10-2004-x64

1

System.Buffers.dll

windows7-x64

1

System.Buffers.dll

windows10-2004-x64

1

System.Dat...te.dll

windows7-x64

1

System.Dat...te.dll

windows10-2004-x64

1

System.Memory.dll

windows7-x64

1

System.Memory.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-08-2024 20:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SharpCompress.dll

  • Size

    558KB

  • MD5

    a582e2f7ccb5875c188716b5e5bc84f2

  • SHA1

    0f1bf79fc02262614038205bd20709dca2ceda62

  • SHA256

    f7cf666f0bf661f63ae3a5e531516fd68ac9353471faa78443f21bfd0a5f2f4b

  • SHA512

    76d036be7840b2e8382753a4dd745aadcb6575e8276e335a2cad9fd46793bdba786d1b32c5e08e43192ed86bb319d6706ca9ae8e061a9fdd96987fe93b0384fc

  • SSDEEP

    6144:ZcdsAgdCvxAlzRRs3+nZgA31sKLQ6RGk6SOZ3YuK/FhLDrthTjVjTap23T7nAEzq:e1xw1sKLPRHFhdCgT7Li3Mc2Cb

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\SharpCompress.dll,#1
    1⤵
      PID:1028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads