e7540e416771a4532807a975e55c934110fd0d1f906d08a400b133e94bebe4c9

Submit
Reports

Overview

overview

Static

static

Dolby_Atmo...m].rar

windows7-x64

Dolby_Atmo...m].rar

windows10-2004-x64

Dolby_Atmo...me.txt

windows7-x64

Dolby_Atmo...me.txt

windows10-2004-x64

Dolby_Atmo...e.txt~

windows7-x64

Dolby_Atmo...e.txt~

windows10-2004-x64

Dolby_Atmo...er.zip

windows7-x64

Dolby_Atmo...er.zip

windows10-2004-x64

CaptureStr...or.dll

windows7-x64

CaptureStr...or.dll

windows10-2004-x64

DAX3API.exe

windows7-x64

DAX3API.exe

windows10-2004-x64

DAX3APIDLL.dll

windows7-x64

DAX3APIDLL.dll

windows10-2004-x64

Default.xml

windows7-x64

Default.xml

windows10-2004-x64

DolbyAPOv251.dll

windows7-x64

DolbyAPOv251.dll

windows10-2004-x64

DolbyAPOvlldp.dll

windows7-x64

DolbyAPOvlldp.dll

windows10-2004-x64

DolbyAPOvlldp120.dll

windows7-x64

DolbyAPOvlldp120.dll

windows10-2004-x64

DolbyDspVlldp.dll

windows7-x64

DolbyDspVlldp.dll

windows10-2004-x64

Headphone_....2.xml

windows7-x64

Headphone_....2.xml

windows10-2004-x64

Headphone_....2.xml

windows7-x64

Headphone_....2.xml

windows10-2004-x64

Headphone_....2.xml

windows7-x64

Headphone_....2.xml

windows10-2004-x64

Headphone_....2.xml

windows7-x64

Headphone_....2.xml

windows10-2004-x64

Resubmissions

11-09-2024 18:46

240911-xe5y3swfpp 7

Analysis

max time kernel
138s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11-09-2024 18:46

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com].rar

Resource

win7-20240903-en

discovery

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com].rar

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com]/Dolby_Atmos_Setup_and_ControlPanel/Readme.txt

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com]/Dolby_Atmos_Setup_and_ControlPanel/Readme.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com]/Dolby_Atmos_Setup_and_ControlPanel/Readme.txt~

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com]/Dolby_Atmos_Setup_and_ControlPanel/Readme.txt~

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com]/Dolby_Atmos_Setup_and_ControlPanel/Windows_10_64-bit_basic_driver.zip

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com]/Dolby_Atmos_Setup_and_ControlPanel/Windows_10_64-bit_basic_driver.zip

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

CaptureStreamMonitor.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

CaptureStreamMonitor.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

DAX3API.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

DAX3API.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

DAX3APIDLL.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

DAX3APIDLL.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Default.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

Default.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

DolbyAPOv251.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

DolbyAPOv251.dll

Resource

win10v2004-20240802-en

persistence privilege_escalation

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

DolbyAPOvlldp.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

DolbyAPOvlldp.dll

Resource

win10v2004-20240802-en

persistence privilege_escalation

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

DolbyAPOvlldp120.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

DolbyAPOvlldp120.dll

Resource

win10v2004-20240802-en

persistence privilege_escalation

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

DolbyDspVlldp.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

DolbyDspVlldp.dll

Resource

win10v2004-20240802-en

persistence privilege_escalation

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

Headphone_Default_Generic_Default_DolbyAtmos_vlldp1.2.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

Headphone_Default_Generic_Default_DolbyAtmos_vlldp1.2.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Headphone_Default_Generic_Large_DolbyAtmos_vlldp1.2.xml

Resource

win7-20240708-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

Headphone_Default_Generic_Large_DolbyAtmos_vlldp1.2.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Headphone_Default_Generic_Medium_DolbyAtmos_vlldp1.2.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

Headphone_Default_Generic_Medium_DolbyAtmos_vlldp1.2.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Headphone_Default_Generic_Small_DolbyAtmos_vlldp1.2.xml

Resource

win7-20240708-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral32

Sample

Headphone_Default_Generic_Small_DolbyAtmos_vlldp1.2.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Default.xml
Size

72KB
MD5

b918a7492cc90737d599eda10cc858ce
SHA1

f514625b0dcaecaad7cafc1ef1011e01e5f24fe9
SHA256

bf3c22e715534724e8864a8de00c90cad4afbe052f171c7435aaf28556739298
SHA512

3da24cb9e929e8fac9427f5a5e76aa7be6b064771316eab0085a772c01bec61525ef2bfa6e4b0a910376d4b469bec5b1f978bccf9f69df98d93d0696ab87460f
SSDEEP

384:gC+6WujBDctLMmeYCDctLMmqZCD6tuMmzYCDltMMmiYCD6tFMm0YCDrtxMmhYCDc:j1A2A9fRcCewlTlelc6r

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Default.xml"
1⤵
PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2928-0-0x00007FFDCADB0000-0x00007FFDCADC0000-memory.dmp

Filesize
64KB

Download
memory/2928-1-0x00007FFE0ADCD000-0x00007FFE0ADCE000-memory.dmp

Filesize
4KB

Download
memory/2928-2-0x00007FFE0AD30000-0x00007FFE0AF25000-memory.dmp

Filesize
2.0MB

Download
memory/2928-3-0x00007FFE0AD30000-0x00007FFE0AF25000-memory.dmp

Filesize
2.0MB

Download