e68d23feaf21b116b0bdeb7c667f8fb547a58f53437dd9e3f9141b5afc6dddcd | Triage

Submit
Reports

Overview

overview

3

Static

static

3

sfbrename-...us.exe

windows7-x64

1

sfbrename-...us.exe

windows10-2004-x64

1

sfbrename-...-7.dll

windows7-x64

1

sfbrename-...-7.dll

windows10-2004-x64

1

sfbrename-...-0.dll

windows7-x64

1

sfbrename-...-0.dll

windows10-2004-x64

1

sfbrename-...-0.dll

windows7-x64

1

sfbrename-...-0.dll

windows10-2004-x64

1

sfbrename-...-0.dll

windows7-x64

1

sfbrename-...-0.dll

windows10-2004-x64

1

sfbrename-...-0.dll

windows7-x64

1

sfbrename-...-0.dll

windows10-2004-x64

1

sfbrename-...-2.dll

windows7-x64

1

sfbrename-...-2.dll

windows10-2004-x64

1

sfbrename-...-8.dll

windows7-x64

1

sfbrename-...-8.dll

windows10-2004-x64

1

sfbrename-...-1.dll

windows7-x64

1

sfbrename-...-1.dll

windows10-2004-x64

1

sfbrename-...me.exe

windows7-x64

1

sfbrename-...me.exe

windows10-2004-x64

1

sfbrename-...b1.dll

windows7-x64

1

sfbrename-...b1.dll

windows10-2004-x64

1

Analysis

max time kernel
135s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01-09-2024 15:07

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

sfbrename-cli-1.0.0-win64/gdbus.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

sfbrename-cli-1.0.0-win64/gdbus.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

sfbrename-cli-1.0.0-win64/libffi-7.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

sfbrename-cli-1.0.0-win64/libffi-7.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

sfbrename-cli-1.0.0-win64/libgio-2.0-0.dll

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

sfbrename-cli-1.0.0-win64/libgio-2.0-0.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

sfbrename-cli-1.0.0-win64/libglib-2.0-0.dll

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

sfbrename-cli-1.0.0-win64/libglib-2.0-0.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

sfbrename-cli-1.0.0-win64/libgmodule-2.0-0.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

sfbrename-cli-1.0.0-win64/libgmodule-2.0-0.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

sfbrename-cli-1.0.0-win64/libgobject-2.0-0.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

sfbrename-cli-1.0.0-win64/libgobject-2.0-0.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

sfbrename-cli-1.0.0-win64/libiconv-2.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

sfbrename-cli-1.0.0-win64/libiconv-2.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

sfbrename-cli-1.0.0-win64/libintl-8.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

sfbrename-cli-1.0.0-win64/libintl-8.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

sfbrename-cli-1.0.0-win64/libpcre-1.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

sfbrename-cli-1.0.0-win64/libpcre-1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

sfbrename-cli-1.0.0-win64/sfbrename.exe

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

sfbrename-cli-1.0.0-win64/sfbrename.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

sfbrename-cli-1.0.0-win64/zlib1.dll

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

sfbrename-cli-1.0.0-win64/zlib1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

sfbrename-cli-1.0.0-win64/libglib-2.0-0.dll
Size

1.3MB
MD5

ffba5531716aeb7cb09e554b2c38d1e1
SHA1

fa4479f73f1fdd3d00d27c328f5ff5111b7a8d8d
SHA256

82718e98be997af93ab514d68a10bb6f902888133d2a756ca639e07d637bff38
SHA512

9c1a245bbea242d19dd00db9cc03acdfaa92d8c295d21d90fee2f5903d1db484e6a5a2ca5d23400ff9d98f1b8ee12cc74e9db39603e208e9771e2c5e80f60de6
SSDEEP

24576:t61WpmxoXnz5nxVvSHM7YBR+EBIp28NLtvXfhZW33Kd:tqWpm2z5nxlyM7YBRnB1utv5ZWnKd

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\sfbrename-cli-1.0.0-win64\libglib-2.0-0.dll,#1
1⤵
PID:1428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1428-2-0x00007FFA0E360000-0x00007FFA0E388000-memory.dmp

Filesize
160KB

Download
memory/1428-0-0x00007FFA08C80000-0x00007FFA08DCF000-memory.dmp

Filesize
1.3MB

Download
memory/1428-1-0x00007FFA08F90000-0x00007FFA08FDD000-memory.dmp

Filesize
308KB

Download
memory/1428-3-0x00007FFA08960000-0x00007FFA08A79000-memory.dmp

Filesize
1.1MB

Download

© 2018-2025

Terms | Privacy