Overview

overview

10

Static

static

10

2024-09-18...ll.exe

windows7-x64

3

2024-09-18...ll.exe

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

1

$PLUGINSDI...ll.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$R0/Uninst...er.exe

windows7-x64

$R0/Uninst...er.exe

windows10-2004-x64

Analysis

  • max time kernel
    92s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-09-2024 23:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $PLUGINSDIR/WinShell.dll

  • Size

    1KB

  • MD5

    f5df50595a73f98b09becac494a8f198

  • SHA1

    6836a0eb9ef7a04d5957c44ddb2fa1d6c5ef196e

  • SHA256

    a963b60c92b2fceb24dd88adaed4fda937821808e24a41f5376170dde5fe571e

  • SHA512

    33868dd49fe1c003b8d7729a349e8e37c10ce85814aca103676e035054633358f217e41ed0c3f0a06a296e5d558d7437429a88e92d0ef91c159dec7129c37923

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\WinShell.dll,#1
    1⤵
      PID:400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads