965faa9d136d712e2a5008849ebee26b11a375a8d6b1e7fce72c9b730afba375 | Triage

Submit
Reports

Overview

overview

Static

static

3

Paranoid v3.4.exe

windows7-x64

7

Paranoid v3.4.exe

windows10-2004-x64

VCRUNTIME140.dll

windows7-x64

1

VCRUNTIME140.dll

windows10-2004-x64

1

libGLE.exe

windows7-x64

7

libGLE.exe

windows10-2004-x64

libcrypto-3.dll

windows7-x64

1

libcrypto-3.dll

windows10-2004-x64

1

libffi-8.dll

windows7-x64

1

libffi-8.dll

windows10-2004-x64

1

libssl-3.dll

windows7-x64

1

libssl-3.dll

windows10-2004-x64

1

pyexpat.dll

windows7-x64

1

pyexpat.dll

windows10-2004-x64

1

python3.dll

windows7-x64

1

python3.dll

windows10-2004-x64

1

python312.dll

windows7-x64

1

python312.dll

windows10-2004-x64

1

select.dll

windows7-x64

1

select.dll

windows10-2004-x64

1

ucrtbase.dll

windows10-2004-x64

1

unicodedata.dll

windows7-x64

1

unicodedata.dll

windows10-2004-x64

1

Analysis

max time kernel
114s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
28-09-2024 13:30

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Paranoid v3.4.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

120 seconds

Behavioral task

behavioral2

Sample

Paranoid v3.4.exe

Resource

win10v2004-20240802-en

exelastealer collection defense_evasion discovery evasion persistence privilege_escalation stealer

windows10-2004-x64

24 signatures

120 seconds

Behavioral task

behavioral3

Sample

VCRUNTIME140.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

120 seconds

Behavioral task

behavioral4

Sample

VCRUNTIME140.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral5

Sample

libGLE.exe

Resource

win7-20240708-en

windows7-x64

2 signatures

120 seconds

Behavioral task

behavioral6

Sample

libGLE.exe

Resource

win10v2004-20240802-en

exelastealer collection defense_evasion discovery evasion persistence privilege_escalation spyware stealer

windows10-2004-x64

26 signatures

120 seconds

Behavioral task

behavioral7

Sample

libcrypto-3.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

120 seconds

Behavioral task

behavioral8

Sample

libcrypto-3.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral9

Sample

libffi-8.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

120 seconds

Behavioral task

behavioral10

Sample

libffi-8.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral11

Sample

libssl-3.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral12

Sample

libssl-3.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral13

Sample

pyexpat.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral14

Sample

pyexpat.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral15

Sample

python3.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral16

Sample

python3.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral17

Sample

python312.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral18

Sample

python312.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral19

Sample

select.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral20

Sample

select.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral21

Sample

ucrtbase.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral22

Sample

unicodedata.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral23

Sample

unicodedata.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

120 seconds

Report Analysis Logs

General

Target

libcrypto-3.dll
Size

4.9MB
MD5

51e8a5281c2092e45d8c97fbdbf39560
SHA1

c499c810ed83aaadce3b267807e593ec6b121211
SHA256

2a234b5aa20c3faecf725bbb54fb33f3d94543f78fa7045408e905593e49960a
SHA512

98b91719b0975cb38d3b3c7b6f820d184ef1b64d38ad8515be0b8b07730e2272376b9e51631fe9efd9b8a1709fea214cf3f77b34eeb9fd282eb09e395120e7cb
SSDEEP

98304:S3+FRtLtlVriXpshX179Cahd4tC9P1+1CPwDvt3uFlDCi:ASRtLtvd99Cahd4tC9w1CPwDvt3uFlDz

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libcrypto-3.dll,#1
1⤵
PID:4540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4216,i,16316361669272684588,6171287487746154806,262144 --variations-seed-version --mojo-platform-channel-handle=4080 /prefetch:8
1⤵
PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy