Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07-09-2024 20:27
Static task
static1
Behavioral task
behavioral1
Sample
New folder/Bin/Injector.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
New folder/Bin/Rebel.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
New folder/FastColoredTextBox.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
New folder/RebelCracked.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
New folder/System.CodeDom.dll
Resource
win10v2004-20240802-en
General
-
Target
New folder/FastColoredTextBox.dll
-
Size
323KB
-
MD5
8610f4d3cdc6cc50022feddced9fdaeb
-
SHA1
4b60b87fd696b02d7fce38325c7adfc9e806f650
-
SHA256
ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9
-
SHA512
693d1af1f89470eab659b4747fe344836affa0af8485b0c0635e2519815e5a498f4618ea08db9dcf421aac1069a04616046207ee05b9ed66c0a1c4a8f0bddd09
-
SSDEEP
6144:0R0J4lx4/7BA4xvNdcwCOg04j0y5mwZkdmsqmLDi5eNH+Dl1SIP0:0R0J48lAovNd7CO34D4b4eNO
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\New folder\FastColoredTextBox.dll",#11⤵PID:3956
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4228,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:81⤵PID:4824