Overview

overview

10

Static

static

3

Paranoid v3.4.exe

windows7-x64

7

Paranoid v3.4.exe

windows10-2004-x64

10

VCRUNTIME140.dll

windows7-x64

1

VCRUNTIME140.dll

windows10-2004-x64

1

libGLE.exe

windows7-x64

7

libGLE.exe

windows10-2004-x64

10

libcrypto-3.dll

windows7-x64

1

libcrypto-3.dll

windows10-2004-x64

1

libffi-8.dll

windows7-x64

1

libffi-8.dll

windows10-2004-x64

1

libssl-3.dll

windows7-x64

1

libssl-3.dll

windows10-2004-x64

1

pyexpat.dll

windows7-x64

1

pyexpat.dll

windows10-2004-x64

1

python3.dll

windows7-x64

1

python3.dll

windows10-2004-x64

1

python312.dll

windows7-x64

1

python312.dll

windows10-2004-x64

1

select.dll

windows7-x64

1

select.dll

windows10-2004-x64

1

ucrtbase.dll

windows10-2004-x64

1

unicodedata.dll

windows7-x64

1

unicodedata.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    92s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-09-2024 13:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    pyexpat.dll

  • Size

    194KB

  • MD5

    e2d1c738d6d24a6dd86247d105318576

  • SHA1

    384198f20724e4ede9e7b68e2d50883c664eee49

  • SHA256

    cdc09fbae2f103196215facd50d108be3eff60c8ee5795dcc80bf57a0f120cdf

  • SHA512

    3f9cb64b4456438dea82a0638e977f233faf0a08433f01ca87ba65c7e80b0680b0ec3009fa146f02ae1fdcc56271a66d99855d222e77b59a1713caf952a807da

  • SSDEEP

    3072:jJB/b2LOWs5LS04q1uqtF+ai7dYbmdRLjDxKyw6XUWdRBIpLhCujk:dB6yx5LT1gqtF+XGeL/xiBoR4g

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\pyexpat.dll,#1
    1⤵
      PID:2892

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads