Overview

overview

9

Static

static

7

Defender_Settings.vbs

windows7-x64

1

Defender_Settings.vbs

windows10-2004-x64

1

dControl.exe

windows7-x64

7

dControl.exe

windows10-2004-x64

7

Flexlm/RLM...er.exe

windows7-x64

9

Flexlm/RLM...er.exe

windows10-2004-x64

9

Flexlm/RLM...de.dll

windows7-x64

1

Flexlm/RLM...de.dll

windows10-2004-x64

1

Flexlm/RLM...ft.bat

windows7-x64

5

Flexlm/RLM...ft.bat

windows10-2004-x64

5

Flexlm/RLM...ft.bat

windows7-x64

8

Flexlm/RLM...ft.bat

windows10-2004-x64

8

block-network.bat

windows7-x64

1

block-network.bat

windows10-2004-x64

1

clean-befo...ll.bat

windows7-x64

8

clean-befo...ll.bat

windows10-2004-x64

8

exe/VC.dll

windows7-x64

1

exe/VC.dll

windows10-2004-x64

1

exe/VCRUNTIME140.dll

windows7-x64

9

exe/VCRUNTIME140.dll

windows10-2004-x64

9

exe/version.dll

windows7-x64

9

exe/version.dll

windows10-2004-x64

9

prs/version.dll

windows7-x64

9

prs/version.dll

windows10-2004-x64

9

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14-09-2024 07:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Flexlm/RLM_Redshift_LicServer/PatchCode.dll

  • Size

    352KB

  • MD5

    6f4d1ca799db5b697020b766cb4e7e0c

  • SHA1

    990c3115d2735e21372172bc68582942baa345fd

  • SHA256

    ba6bf08993a7af731350c033f0d8baef60cbf1be1dc7b5470ffc94346694d3f5

  • SHA512

    d8c5de383d5fd458313b0d7dc90dfae058c31cac2c082e3f59b7aee68d03b7d6bd97eab461aa553d796e7b598f7fd4cca18d217f38f7182b2e06b1b705bb6045

  • SSDEEP

    6144:h19DH6EvbWViXhlDMRbFiM1JtwXJNZrxwcjWcNOR3dSk:BDH60bWViXhlyFiMntjc

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Flexlm\RLM_Redshift_LicServer\PatchCode.dll,#1
    1⤵
      PID:996

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/996-0-0x0000000037310000-0x0000000037320000-memory.dmp

      Filesize

      64KB

      Download