Overview

overview

8

Static

static

4

8870e6242e...93.exe

windows7-x64

7

8870e6242e...93.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

AutoEncryptDemo.exe

windows7-x64

1

AutoEncryptDemo.exe

windows10-2004-x64

1

AutoFileCryptTool.exe

windows7-x64

8

AutoFileCryptTool.exe

windows10-2004-x64

8

Bin/win10x...lt.sys

windows10-2004-x64

1

Bin/win10x...mo.exe

windows7-x64

1

Bin/win10x...mo.exe

windows10-2004-x64

1

Bin/win10x...PI.dll

windows7-x64

1

Bin/win10x...PI.dll

windows10-2004-x64

1

Bin/win10x...lt.sys

windows10-2004-x64

1

Bin/win10x...mo.exe

windows7-x64

1

Bin/win10x...mo.exe

windows10-2004-x64

1

Bin/win10x...PI.dll

windows7-x64

3

Bin/win10x...PI.dll

windows10-2004-x64

3

Bin/win32/EaseFlt.sys

windows7-x64

1

Bin/win32/EaseFlt.sys

windows10-2004-x64

1

Bin/win32/...mo.exe

windows7-x64

1

Bin/win32/...mo.exe

windows10-2004-x64

1

Bin/win32/...PI.dll

windows7-x64

3

Bin/win32/...PI.dll

windows10-2004-x64

3

Bin/x64/EaseFlt.sys

windows7-x64

1

Bin/x64/EaseFlt.sys

windows10-2004-x64

1

Bin/x64/Ea...mo.exe

windows7-x64

1

Bin/x64/Ea...mo.exe

windows10-2004-x64

1

Bin/x64/FilterAPI.dll

windows7-x64

1

Bin/x64/FilterAPI.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-08-2024 00:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Bin/win10x64/EaseFltCPPDemo.exe

  • Size

    175KB

  • MD5

    0d245d5c774f7914a3a59133524cafd5

  • SHA1

    e107df47ed5a7c914b8be67f9029a9d1a561032c

  • SHA256

    d30ed2bae09788fd1d5e108a69903db1fec827a427200e009af99653f12baf2d

  • SHA512

    5282623b88f5be6e81744f8410aa26bda780200f54d91c9953c1d0608e8c718dc0a9274c77ff3fc3092f8a200cff3016c42a995a9d529877e80198181f4c6bbd

  • SSDEEP

    3072:IRaTGfDQ+QnkJZEGJgFww0lTj6V5pYHfrRtHle3aengSS7yCVScbQEXQi4:Saik+mkDpXlTj65pYHfrRtHlIU7yCUEy

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Bin\win10x64\EaseFltCPPDemo.exe
    "C:\Users\Admin\AppData\Local\Temp\Bin\win10x64\EaseFltCPPDemo.exe"
    1⤵
      PID:2200

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads