Overview
overview
3Static
static
3TicketMast...ta.dll
windows7-x64
1TicketMast...ta.dll
windows10-2004-x64
1TicketMast...ns.dll
windows7-x64
1TicketMast...ns.dll
windows10-2004-x64
1TicketMast...ws.dll
windows7-x64
1TicketMast...ws.dll
windows10-2004-x64
1TicketMast...er.dll
windows7-x64
1TicketMast...er.dll
windows10-2004-x64
1TicketMast...eb.dll
windows7-x64
1TicketMast...eb.dll
windows10-2004-x64
1TicketMast...on.dll
windows7-x64
1TicketMast...on.dll
windows10-2004-x64
1TicketMast...ls.dll
windows7-x64
1TicketMast...ls.dll
windows10-2004-x64
1TicketMast...st.dll
windows7-x64
1TicketMast...st.dll
windows10-2004-x64
1TicketMast...tp.dll
windows7-x64
1TicketMast...tp.dll
windows10-2004-x64
1TicketMast...ns.dll
windows7-x64
1TicketMast...ns.dll
windows10-2004-x64
1TicketMast...er.exe
windows7-x64
1TicketMast...er.exe
windows10-2004-x64
1TicketMast...er.exe
windows7-x64
1TicketMast...er.exe
windows10-2004-x64
1TicketMast...ng.dll
windows7-x64
3TicketMast...ng.dll
windows10-2004-x64
3TicketMast...nt.dll
windows7-x64
3TicketMast...nt.dll
windows10-2004-x64
3TicketMast...nt.dll
windows7-x64
3TicketMast...nt.dll
windows10-2004-x64
3TicketMast...ws.dll
windows7-x64
3TicketMast...ws.dll
windows10-2004-x64
3Analysis
-
max time kernel
141s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
10/08/2024, 10:55
Static task
static1
Behavioral task
behavioral1
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Security.Cryptography.ProtectedData.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Security.Cryptography.ProtectedData.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Security.Permissions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Security.Permissions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Security.Principal.Windows.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Security.Principal.Windows.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.ServiceProcess.ServiceController.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.ServiceProcess.ServiceController.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Text.Encodings.Web.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Text.Encodings.Web.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Text.Json.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Text.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Threading.Channels.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Threading.Channels.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Web.Http.WebHost.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Web.Http.WebHost.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Web.Http.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Web.Http.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Windows.Extensions.dll
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Windows.Extensions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/TicketMaster.exe
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/TicketMaster.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/TicketMaster.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/TicketMaster.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/runtimes/unix/lib/netcoreapp2.0/System.Runtime.Caching.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/runtimes/unix/lib/netcoreapp2.0/System.Runtime.Caching.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/runtimes/unix/lib/netcoreapp2.1/Microsoft.Data.SqlClient.dll
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/runtimes/unix/lib/netcoreapp2.1/Microsoft.Data.SqlClient.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/runtimes/unix/lib/netcoreapp2.1/System.Data.SqlClient.dll
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/runtimes/unix/lib/netcoreapp2.1/System.Data.SqlClient.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/runtimes/unix/lib/netcoreapp2.1/System.Security.Principal.Windows.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/runtimes/unix/lib/netcoreapp2.1/System.Security.Principal.Windows.dll
Resource
win10v2004-20240802-en
General
-
Target
TicketMaster/TicketMaster/bin/Release/netcoreapp3.1/System.Threading.Channels.dll
-
Size
74KB
-
MD5
ca82689ff97114b0e910c22f8f9a80d9
-
SHA1
2fe227b0fc5d7a82e2aa65080413bd1cf96f21c1
-
SHA256
31c7e3704c0477c53d9306362dc6abe741088efb7a7b4e46cded0169cf7bb0b2
-
SHA512
433128cb08316368e3ccebc1f6d09d07bdf25eba73b89134b49e7f2a8505481f0c6798a0b3fce098be77c8c1114b0ad04cca2a94b881c09ef1af6281f0a4f3a6
-
SSDEEP
1536:hOW/X2OQk548/jr9wEqFvTbmcv+ijzKMe:hv/XxQajr9mucvJjGn
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\TicketMaster\TicketMaster\bin\Release\netcoreapp3.1\System.Threading.Channels.dll,#11⤵PID:1328
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1036,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:81⤵PID:3880