Overview

overview

7

Static

static

3

960d5c7972...18.exe

windows7-x64

7

960d5c7972...18.exe

windows10-2004-x64

7

$0/uninstall.exe

windows7-x64

7

$0/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$0/zwankysearch.dll

windows7-x64

1

$0/zwankysearch.dll

windows10-2004-x64

1

$0/zwankysearch.exe

windows7-x64

1

$0/zwankysearch.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    139s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/08/2024, 12:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $0/zwankysearch.dll

  • Size

    564KB

  • MD5

    73129c296e9a54d59a24e623b6091652

  • SHA1

    3cc899e3deb891cfa10981903ad01a7db0b6d8b2

  • SHA256

    d773b1dade17560e01a1d57d304b9ff853953fffefdda81ead0448f6be719e8d

  • SHA512

    48ff62c6e2cd50378adabf074c906d64d57230be1563b49a3e1b37216d3abb03a4bbb5bd8d5b8cd7a24f130fd586947603ad8f7268abd8941b3bdc9e66224fa8

  • SSDEEP

    12288:qZW11pKUJa5YDG8Wx+Y4y9rMJJboeFvbmSsVjKuPI:/rgWaBx+S9rM7bFdsdPI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$0\zwankysearch.dll,#1
    1⤵
      PID:4412

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads