Overview

overview

7

Static

static

3

c085a92187...18.exe

windows7-x64

7

c085a92187...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

3

$R0.dll

windows10-2004-x64

3

$R2/NSIS.L...0_.exe

windows7-x64

1

$R2/NSIS.L...0_.exe

windows10-2004-x64

3

$TEMP/CloudTool.exe

windows7-x64

1

$TEMP/CloudTool.exe

windows10-2004-x64

3

$TEMP/LongRADrv.sys

windows7-x64

1

$TEMP/LongRADrv.sys

windows10-2004-x64

1

$TEMP/LongRADrv2K.sys

windows7-x64

1

$TEMP/LongRADrv2K.sys

windows10-2004-x64

1

7zxr.dll

windows7-x64

3

7zxr.dll

windows10-2004-x64

3

LongRADrv.sys

windows7-x64

1

LongRADrv.sys

windows10-2004-x64

1

LongRADrv2K.sys

windows7-x64

1

LongRADrv2K.sys

windows10-2004-x64

1

LongRAShell.exe

windows7-x64

3

LongRAShell.exe

windows10-2004-x64

3

cloud.exe

windows7-x64

3

cloud.exe

windows10-2004-x64

3

mycompress.dll

windows7-x64

3

mycompress.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

LongRADrv.sys

windows7-x64

1

LongRADrv.sys

windows10-2004-x64

1

Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    25-08-2024 10:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/CloudTool.exe

  • Size

    36KB

  • MD5

    a40faf9512cdbded5be40e9954a58ad1

  • SHA1

    94e24873d2e1d9f33e159fb867bbf318540998dc

  • SHA256

    fb4b443998ccf4c9a16770b8259185e1f587e96227391a2e0526615cf90b9d2f

  • SHA512

    b84625080250cde14f3b3b7519ffbfdb1a13065d0a12685f192be9e391ac279d699e4c8584f7d36d30e2cabdff280f66e2cc5e112f49b04f1dcde46a9b0d44fe

  • SSDEEP

    384:tfyS0F7rl+CdG8itsG7TG7S9Mye5ylRcS9Ebl:tfv0F7hJzibBu5s5ubl

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\CloudTool.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\CloudTool.exe"
    1⤵
      PID:2928

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads