Overview

overview

3

Static

static

3

Wind/libcurl.dll

windows7-x64

1

Wind/libcurl.dll

windows10-2004-x64

1

Wind/windinject.exe

windows7-x64

1

Wind/windinject.exe

windows10-2004-x64

1

Wind/xxhash.dll

windows7-x64

1

Wind/xxhash.dll

windows10-2004-x64

1

Wind/zlib1.dll

windows7-x64

1

Wind/zlib1.dll

windows10-2004-x64

1

Wind/zstd.dll

windows7-x64

1

Wind/zstd.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    136s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-08-2024 17:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Wind/xxhash.dll

  • Size

    45KB

  • MD5

    fd4a9c28c2b7b7f7cae985eed789f0ce

  • SHA1

    44b51dd9a141f3dfcc090549e6c90071f8b55fb4

  • SHA256

    dc354e7ea9046cadbed8645e4666975a523463500c877574f8e8306d958b7304

  • SHA512

    b3ae3d523a1a2de93f05cfa856ac6984d444ee5180f862f0046be3acd02fb499400909449c7e47f764aea2d7d3863e42c7029b0cfc8803b79a91c9f56f3b8bc1

  • SSDEEP

    768:f9otvM7DZ1LMDJdj+LVvgFlJus4zBYdXK3QDV:f9UEDLMDJxKM0scCXKA

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wind\xxhash.dll,#1
    1⤵
      PID:2896
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4300,i,2904906934812054273,11716976550456127484,262144 --variations-seed-version --mojo-platform-channel-handle=1420 /prefetch:8
      1⤵
        PID:1136

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads