Overview

overview

8

Static

static

4

8870e6242e...93.exe

windows7-x64

7

8870e6242e...93.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

AutoEncryptDemo.exe

windows7-x64

1

AutoEncryptDemo.exe

windows10-2004-x64

1

AutoFileCryptTool.exe

windows7-x64

8

AutoFileCryptTool.exe

windows10-2004-x64

8

Bin/win10x...lt.sys

windows10-2004-x64

1

Bin/win10x...mo.exe

windows7-x64

1

Bin/win10x...mo.exe

windows10-2004-x64

1

Bin/win10x...PI.dll

windows7-x64

1

Bin/win10x...PI.dll

windows10-2004-x64

1

Bin/win10x...lt.sys

windows10-2004-x64

1

Bin/win10x...mo.exe

windows7-x64

1

Bin/win10x...mo.exe

windows10-2004-x64

1

Bin/win10x...PI.dll

windows7-x64

3

Bin/win10x...PI.dll

windows10-2004-x64

3

Bin/win32/EaseFlt.sys

windows7-x64

1

Bin/win32/EaseFlt.sys

windows10-2004-x64

1

Bin/win32/...mo.exe

windows7-x64

1

Bin/win32/...mo.exe

windows10-2004-x64

1

Bin/win32/...PI.dll

windows7-x64

3

Bin/win32/...PI.dll

windows10-2004-x64

3

Bin/x64/EaseFlt.sys

windows7-x64

1

Bin/x64/EaseFlt.sys

windows10-2004-x64

1

Bin/x64/Ea...mo.exe

windows7-x64

1

Bin/x64/Ea...mo.exe

windows10-2004-x64

1

Bin/x64/FilterAPI.dll

windows7-x64

1

Bin/x64/FilterAPI.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    20-08-2024 00:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Bin/x64/EaseFlt.sys

  • Size

    195KB

  • MD5

    29cd351b4f15bee9d418c007e8cf2476

  • SHA1

    7a8fcd3e416a3a34dc81c2317ebfb88f187dfb08

  • SHA256

    f27413b7e3a428ce475eeaef131274502d332d7da6ae3a85bb9f22f427be5e1e

  • SHA512

    b35126bed8679d285e4e339ca2114c11cce1355848807391e3a43a9d4fe10553a5fc5df9254c64c82eda73f1f1976b1a1461238898b2ce616c5ede3231450bdc

  • SSDEEP

    3072:D/B2V+IRYee+tz6hmSAStnmLWnq3DX5XAMvwTyIUx/739+q:Dp/09EhAGnq3DXauwTCxEq

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Bin\x64\EaseFlt.sys
    1⤵
      PID:2140
      • C:\Users\Admin\AppData\Local\Temp\Bin\x64\EaseFlt.sys
        C:\Users\Admin\AppData\Local\Temp\Bin\x64\EaseFlt.sys
        2⤵
          PID:2088

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2088-0-0x0000000000010000-0x0000000000044000-memory.dmp

        Filesize

        208KB

        Download