e7b275d70655db9cb43fa606bbe2e4f22478ca4962bbf9f299d66eda567d63cd | Triage

Submit
Reports

Overview

overview

Static

static

plugins/Chat.dll

windows7-x64

1

plugins/Chat.dll

windows10-2004-x64

1

plugins/Fi...er.dll

windows7-x64

1

plugins/Fi...er.dll

windows10-2004-x64

1

plugins/Fun.dll

windows7-x64

1

plugins/Fun.dll

windows10-2004-x64

1

plugins/Hvnc.dll

windows7-x64

1

plugins/Hvnc.dll

windows10-2004-x64

1

plugins/InfoGrab.dll

windows7-x64

1

plugins/InfoGrab.dll

windows10-2004-x64

1

plugins/KeyLogger.dll

windows7-x64

1

plugins/KeyLogger.dll

windows10-2004-x64

1

plugins/Ke...ne.dll

windows7-x64

1

plugins/Ke...ne.dll

windows10-2004-x64

1

plugins/Li...ne.dll

windows7-x64

1

plugins/Li...ne.dll

windows10-2004-x64

1

plugins/Pr...er.dll

windows7-x64

1

plugins/Pr...er.dll

windows10-2004-x64

1

plugins/Re...er.dll

windows7-x64

1

plugins/Re...er.dll

windows10-2004-x64

1

plugins/Re...xy.dll

windows7-x64

1

plugins/Re...xy.dll

windows10-2004-x64

1

plugins/Sc...ol.dll

windows7-x64

1

plugins/Sc...ol.dll

windows10-2004-x64

1

plugins/Shell.dll

windows7-x64

1

plugins/Shell.dll

windows10-2004-x64

1

plugins/Startup.dll

windows7-x64

1

plugins/Startup.dll

windows10-2004-x64

1

plugins/Sy...er.dll

windows7-x64

1

plugins/Sy...er.dll

windows10-2004-x64

1

plugins/Uacbypass.dll

windows7-x64

1

plugins/Uacbypass.dll

windows10-2004-x64

1

Analysis

max time kernel
137s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12-08-2024 21:56

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

plugins/Chat.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

plugins/Chat.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

plugins/File manager.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

plugins/File manager.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

plugins/Fun.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

plugins/Fun.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

plugins/Hvnc.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

plugins/Hvnc.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

plugins/InfoGrab.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

plugins/InfoGrab.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

plugins/KeyLogger.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

plugins/KeyLogger.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

plugins/KeyLoggerOffline.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

plugins/KeyLoggerOffline.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

plugins/LiveMicrophone.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

plugins/LiveMicrophone.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

plugins/ProcessManager.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

plugins/ProcessManager.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

plugins/Registry Manager.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

plugins/Registry Manager.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

plugins/ReverseProxy.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

plugins/ReverseProxy.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

plugins/ScreenControl.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

plugins/ScreenControl.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

plugins/Shell.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

plugins/Shell.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

plugins/Startup.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

plugins/Startup.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

plugins/SystemPower.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

plugins/SystemPower.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

plugins/Uacbypass.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

plugins/Uacbypass.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

plugins/Shell.dll
Size

9KB
MD5

5e3e4438045c426410122210759cc0c8
SHA1

c7858413c6b724135afeb1f878f986b0ae1bfa46
SHA256

81bb6bed470afa97db39d7048dd8d9b7c7786fe8297f51390b5c83b450cdb5e0
SHA512

d0a656048deaab2916bd98f5205bda41686891eff65ee7608117157e4f04ee22dfcd8b9bdccbce1bdd065a1573229c3996122b907a303b8494ad7b730fe5d929
SSDEEP

96:25ATBzB7uwBHfse4hDjl2KQ1dndjVvIibvibKh0c9v5g+m2rwBGbEbrxtZfvPn2k:25kFDMlor1ZT5guvbEJtZ/2WYC

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\plugins\Shell.dll,#1
1⤵
PID:3940

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4228,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:8
1⤵
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy