Overview

overview

10

Static

static

7

info.zip

windows7-x64

1

info.zip

windows10-2004-x64

1

IMG001.scr

windows7-x64

8

IMG001.scr

windows10-2004-x64

8

$PLUGINSDI...os.dll

windows7-x64

3

$PLUGINSDI...os.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$R9/NsCpuC...32.exe

windows7-x64

7

$R9/NsCpuC...32.exe

windows10-2004-x64

7

$R9/NsCpuC...64.exe

windows7-x64

7

$R9/NsCpuC...64.exe

windows10-2004-x64

7

$R9/Plugin...os.dll

windows7-x64

3

$R9/Plugin...os.dll

windows10-2004-x64

3

$R9/Plugins/inetc.dll

windows7-x64

3

$R9/Plugins/inetc.dll

windows10-2004-x64

3

$R9/Plugins/tftp.exe

windows7-x64

8

$R9/Plugins/tftp.exe

windows10-2004-x64

10

$R9/Stubs/bzip2.exe

windows7-x64

3

$R9/Stubs/bzip2.exe

windows10-2004-x64

3

$R9/Stubs/...id.exe

windows7-x64

3

$R9/Stubs/...id.exe

windows10-2004-x64

3

$R9/Stubs/folder.ico

windows7-x64

3

$R9/Stubs/folder.ico

windows10-2004-x64

3

$R9/Stubs/icon.ico

windows7-x64

3

$R9/Stubs/icon.ico

windows10-2004-x64

3

$R9/Stubs/lzma.exe

windows7-x64

3

$R9/Stubs/lzma.exe

windows10-2004-x64

3

$R9/Stubs/rar.ico

windows7-x64

3

$R9/Stubs/rar.ico

windows10-2004-x64

3

$R9/Stubs/uninst

windows7-x64

1

$R9/Stubs/uninst

windows10-2004-x64

1

Analysis

  • max time kernel
    94s
  • max time network
    107s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-09-2024 05:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $R9/Stubs/folder.ico

  • Size

    52KB

  • MD5

    bbf9dbdc079c0cd95f78d728aa3912d4

  • SHA1

    051f76cc8c6520768bac9559bb329abeebd70d7c

  • SHA256

    bef53904908769ceeb60f8e0976c3194e73534f00f4afb65497c2091121b98b2

  • SHA512

    af110c52c983f1cf55b3db7d375e03c8c9308e3cf9ee1c154c2b25cb3f8299f0c0ba87b47445f09f98659eb536184c245887a341733c11af713e9ecc15288b5d

  • SSDEEP

    1536:y3i6EBXR2n7dqnfiVDIHMPV0+l/SLOUp4:8eiVD+EmUSLOUp4

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\$R9\Stubs\folder.ico
    1⤵
      PID:1408

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads