Overview

overview

3

Static

static

3

ExReporter...er.exe

windows10-1703-x64

1

ExReporter...40.dll

windows10-1703-x64

1

ExReporter...z2.dll

windows10-1703-x64

1

ExReporter...es.dll

windows10-1703-x64

1

ExReporter...al.dll

windows10-1703-x64

1

ExReporter...ib.dll

windows10-1703-x64

1

ExReporter...ma.dll

windows10-1703-x64

1

ExReporter...ng.dll

windows10-1703-x64

1

ExReporter...ue.dll

windows10-1703-x64

1

ExReporter...sl.dll

windows10-1703-x64

1

encodings/cp424.pyc

windows10-1703-x64

3

encodings/cp437.pyc

windows10-1703-x64

3

encodings/cp500.pyc

windows10-1703-x64

3

encodings/cp720.pyc

windows10-1703-x64

3

encodings/cp737.pyc

windows10-1703-x64

3

encodings/cp775.pyc

windows10-1703-x64

3

encodings/cp850.pyc

windows10-1703-x64

3

encodings/cp852.pyc

windows10-1703-x64

3

encodings/cp855.pyc

windows10-1703-x64

3

encodings/cp856.pyc

windows10-1703-x64

3

encodings/cp857.pyc

windows10-1703-x64

3

encodings/cp858.pyc

windows10-1703-x64

3

encodings/cp860.pyc

windows10-1703-x64

3

encodings/cp861.pyc

windows10-1703-x64

3

encodings/cp862.pyc

windows10-1703-x64

3

ExReporter...-3.dll

windows10-1703-x64

1

ExReporter...-8.dll

windows10-1703-x64

1

ExReporter...-3.dll

windows10-1703-x64

1

ExReporter...at.dll

windows10-1703-x64

1

ExReporter...12.dll

windows10-1703-x64

1

ExReporter...ct.dll

windows10-1703-x64

1

ExReporter...ta.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    135s
  • max time network
    143s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    18/08/2024, 19:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ExReporter/_internal/pyexpat.dll

  • Size

    195KB

  • MD5

    f554064233c082f98ef01195693d967d

  • SHA1

    f191d42807867e0174ddc66d04c45250d9f6561e

  • SHA256

    e1d56ffbf5e5fab481d7a14691481b8ff5d2f4c6bf5d1a4664c832756c5942fe

  • SHA512

    3573a226305cec45333fc4d0e6fc0c3357421ad77cd8a1899c90515994351292ee5d1c445412b5563aa02520736e870a9ee879909cd992f5be32e877792bdb88

  • SSDEEP

    3072:mhaQEuYCUDWuc7VmkqrgVrLJEKAAKJadAT0nIgjWdopPb/+mVApIGLhSZ:yaJh6v7VRVrLJEKAABiuXKd4GE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ExReporter\_internal\pyexpat.dll,#1
    1⤵
      PID:3296

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads