95dbd294f511335bb0b368c487abe48e8d72aa4b165cba94d32cef71a5e46916 | Triage

Submit
Reports

Overview

overview

Static

static

3

sandboxie-5-69-6.exe

windows11-21h2-x64

$PLUGINSDI...ns.dll

windows11-21h2-x64

$PLUGINSDI...il.exe

windows11-21h2-x64

$PLUGINSDI...LL.dll

windows11-21h2-x64

8

$PLUGINSDI...ll.dll

windows11-21h2-x64

1

$PLUGINSDI...sg.dll

windows11-21h2-x64

1

$PLUGINSDI...em.dll

windows11-21h2-x64

3

32/SbieDll.dll

windows11-21h2-x64

3

32/SbieSvc.exe

windows11-21h2-x64

3

KmdUtil.exe

windows11-21h2-x64

1

SandboxieBITS.exe

windows11-21h2-x64

1

SandboxieCrypto.exe

windows11-21h2-x64

1

SandboxieD...ch.exe

windows11-21h2-x64

8

SandboxieRpcSs.exe

windows11-21h2-x64

1

SandboxieWUAU.exe

windows11-21h2-x64

1

SbieCtrl.exe

windows11-21h2-x64

1

SbieDll.dll

windows11-21h2-x64

1

SbieDrv.sys

windows11-21h2-x64

1

SbieIni.exe

windows11-21h2-x64

1

SbieMsg.dll

windows11-21h2-x64

1

SbieSvc.exe

windows11-21h2-x64

1

SboxHostDll.dll

windows11-21h2-x64

1

Start.exe

windows11-21h2-x64

1

UpdUtil.exe

windows11-21h2-x64

1

whatsnew.html

windows11-21h2-x64

3

Analysis

max time kernel
1396s
max time network
1160s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
21-08-2024 19:34

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

sandboxie-5-69-6.exe

Resource

win11-20240802-en

defense_evasion discovery

windows11-21h2-x64

23 signatures

1800 seconds

Behavioral task

behavioral2

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11-20240802-en

defense_evasion discovery evasion persistence privilege_escalation upx

windows11-21h2-x64

28 signatures

1800 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/KmdUtil.exe

Resource

win11-20240802-en

dharma fantom mimikatz bootkit credential_access defense_evasion discovery evasion execution impact persistence ransomware spyware stealer

windows11-21h2-x64

40 signatures

1800 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11-20240802-en

defense_evasion discovery evasion persistence ransomware

windows11-21h2-x64

23 signatures

1800 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/SbieDll.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/SbieMsg.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral8

Sample

32/SbieDll.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

32/SbieSvc.exe

Resource

win11-20240802-en

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral10

Sample

KmdUtil.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

SandboxieBITS.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

SandboxieCrypto.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

SandboxieDcomLaunch.exe

Resource

win11-20240802-en

defense_evasion discovery

windows11-21h2-x64

15 signatures

1800 seconds

Behavioral task

behavioral14

Sample

SandboxieRpcSs.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

SandboxieWUAU.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

SbieCtrl.exe

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral17

Sample

SbieDll.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

SbieDrv.sys

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral19

Sample

SbieIni.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

SbieMsg.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

SbieSvc.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

SboxHostDll.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Start.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

UpdUtil.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral25

Sample

whatsnew.html

Resource

win11-20240802-en

windows11-21h2-x64

7 signatures

1800 seconds

Report Analysis Logs

General

Target

$PLUGINSDIR/SbieDll.dll
Size

903KB
MD5

e2ff7ff41be41ea79e0f502461577161
SHA1

8dcbd20c9235bb2366d73d6c2d6f40cf63441997
SHA256

cd5d0d000ba4fa7149ef10ce218e52d37250581a32a337db06bfc47c49a9b90e
SHA512

d1487b9bbad667aeb7389d9f35707dd4d8988d9d0fecee30e73bfe2b5e607c30bb0dae77c021243ec18b2ecda7aa9ce5c865a02907caedcd164ce5b9f9682371
SSDEEP

12288:JAWt2/ntVEZLHk8YLnUANNDO/5NrOJFct1V/yi0cW9u:2Wt2/tVEZA8WNO5JOJF81dd0cW9u

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\SbieDll.dll,#1
1⤵
PID:3944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy