9ebe4f5ffe19d7e669c824a2509be455273aa434cf42c82ec91e3a7d8b49e3dd

Submit
Reports

Overview

overview

Static

static

amd64_netf...im.dll

windows7-x64

amd64_netf...im.dll

windows10-2004-x64

amd64_netf...rf.dll

windows7-x64

amd64_netf...rf.dll

windows10-2004-x64

amd64_netf...ee.dll

windows7-x64

amd64_netf...ee.dll

windows10-2004-x64

amd64_netf...es.dll

windows7-x64

amd64_netf...es.dll

windows10-2004-x64

amd64_wpf-...st.exe

windows7-x64

amd64_wpf-...st.exe

windows10-2004-x64

amd64_wpf-...xy.dll

windows7-x64

amd64_wpf-...xy.dll

windows10-2004-x64

x86_netfx-...im.dll

windows7-x64

x86_netfx-...im.dll

windows10-2004-x64

x86_netfx-...rf.dll

windows7-x64

x86_netfx-...rf.dll

windows10-2004-x64

x86_netfx-...ee.dll

windows7-x64

x86_netfx-...ee.dll

windows10-2004-x64

x86_netfx-...es.dll

windows7-x64

x86_netfx-...es.dll

windows10-2004-x64

x86_wpf-pr...st.exe

windows7-x64

x86_wpf-pr...st.exe

windows10-2004-x64

x86_wpf-pr...xy.dll

windows7-x64

x86_wpf-pr...xy.dll

windows10-2004-x64

Analysis

max time kernel
16s
max time network
20s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
14-09-2024 05:15

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

amd64_netfx-dfshim_dll_31bf3856ad364e35_6.1.6001.18242_none_9ca423e8b4415204/dfshim.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

amd64_netfx-dfshim_dll_31bf3856ad364e35_6.1.6001.18242_none_9ca423e8b4415204/dfshim.dll

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

amd64_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.1.6001.18242_none_b8b7d5fad28075e7/netfxperf.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

amd64_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.1.6001.18242_none_b8b7d5fad28075e7/netfxperf.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

amd64_netfx-mscoree_dll_31bf3856ad364e35_6.1.6001.18242_none_d984299dad710f1b/mscoree.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

amd64_netfx-mscoree_dll_31bf3856ad364e35_6.1.6001.18242_none_d984299dad710f1b/mscoree.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

amd64_netfx-mscorees_dll_31bf3856ad364e35_6.1.6001.18242_none_3d7db7b9e274d6c8/mscorees.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

amd64_netfx-mscorees_dll_31bf3856ad364e35_6.1.6001.18242_none_3d7db7b9e274d6c8/mscorees.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

amd64_wpf-presentationhostexe_31bf3856ad364e35_6.1.6001.18242_none_941860c977654550/presentationhost.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

amd64_wpf-presentationhostexe_31bf3856ad364e35_6.1.6001.18242_none_941860c977654550/presentationhost.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

amd64_wpf-presentationhostproxy_31bf3856ad364e35_6.1.6001.18242_none_4eaf4424d1168482/presentationhostproxy.dll

Resource

win7-20240903-en

persistence privilege_escalation

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

amd64_wpf-presentationhostproxy_31bf3856ad364e35_6.1.6001.18242_none_4eaf4424d1168482/presentationhostproxy.dll

Resource

win10v2004-20240802-en

persistence privilege_escalation

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

x86_netfx-dfshim_dll_31bf3856ad364e35_6.1.6001.18242_none_40858864fbe3e0ce/dfshim.dll

Resource

win7-20240729-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

x86_netfx-dfshim_dll_31bf3856ad364e35_6.1.6001.18242_none_40858864fbe3e0ce/dfshim.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.1.6001.18242_none_5c993a771a2304b1/netfxperf.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.1.6001.18242_none_5c993a771a2304b1/netfxperf.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

x86_netfx-mscoree_dll_31bf3856ad364e35_6.1.6001.18242_none_7d658e19f5139de5/mscoree.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

x86_netfx-mscoree_dll_31bf3856ad364e35_6.1.6001.18242_none_7d658e19f5139de5/mscoree.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

x86_netfx-mscorees_dll_31bf3856ad364e35_6.1.6001.18242_none_e15f1c362a176592/mscorees.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

x86_netfx-mscorees_dll_31bf3856ad364e35_6.1.6001.18242_none_e15f1c362a176592/mscorees.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

x86_wpf-presentationhostexe_31bf3856ad364e35_6.1.6001.18242_none_37f9c545bf07d41a/presentationhost.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

x86_wpf-presentationhostexe_31bf3856ad364e35_6.1.6001.18242_none_37f9c545bf07d41a/presentationhost.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

x86_wpf-presentationhostproxy_31bf3856ad364e35_6.1.6001.18242_none_f290a8a118b9134c/presentationhostproxy.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

x86_wpf-presentationhostproxy_31bf3856ad364e35_6.1.6001.18242_none_f290a8a118b9134c/presentationhostproxy.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

amd64_netfx-mscoree_dll_31bf3856ad364e35_6.1.6001.18242_none_d984299dad710f1b/mscoree.dll
Size

434KB
MD5

72ab6633e9b39ec7febedf083a9061e5
SHA1

774c6bf77d1792c7125ca667876a87f7bc1620c7
SHA256

758e5ba89665c574456a2a826ef5a7dc2487c8379893010eb57bc40127ac918f
SHA512

b3bdf2a9656a5dddf0893ecfb99395ee6f85c146607e938bdf054d28f3d3a809a5ef018f5db9e845ec3dd8b4b31dc6970886663f95bb938cfa9a15e5c009625d
SSDEEP

12288:Unld65l/E9xFAeWSan0c2TpEZz1nMT5a9cQ/K:Uld6XERBcn0c2TaZz1nMT5a9cQi

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\amd64_netfx-mscoree_dll_31bf3856ad364e35_6.1.6001.18242_none_d984299dad710f1b\mscoree.dll
1⤵
PID:1744

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads