4704846c5605552a2573aeb62f176630fd2ba5498457420c3fb36a27cae6800f | Triage

Submit
Reports

Overview

overview

5

Static

static

3

EzExtractSetup.exe

windows10-2004-x64

4

EzExtractSetup.exe

windows11-21h2-x64

4

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows11-21h2-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...st.exe

windows10-2004-x64

4

$PLUGINSDI...st.exe

windows11-21h2-x64

4

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

GoogleUpdateSetup.exe

windows10-2004-x64

4

GoogleUpdateSetup.exe

windows11-21h2-x64

4

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

EzExtractP...ll.dll

windows10-2004-x64

1

EzExtractP...ll.dll

windows11-21h2-x64

1

EzExtractProShell.dll

windows10-2004-x64

5

EzExtractProShell.dll

windows11-21h2-x64

5

EzExtractP...32.dll

windows10-2004-x64

3

EzExtractP...32.dll

windows11-21h2-x64

3

Analysis

max time kernel
95s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01-10-2024 11:59

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

EzExtractSetup.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

EzExtractSetup.exe

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/INetC.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/INetC.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/NsisPlugin.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/NsisPlugin.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/gcinst.exe

Resource

win10v2004-20240802-en

discovery evasion trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/gcinst.exe

Resource

win11-20240802-en

discovery evasion trojan

windows11-21h2-x64

10 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/System.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

GoogleUpdateSetup.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

GoogleUpdateSetup.exe

Resource

win11-20240802-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

EzExtractProCoreDll.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

EzExtractProCoreDll.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

EzExtractProShell.dll

Resource

win10v2004-20240802-en

persistence privilege_escalation

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

EzExtractProShell.dll

Resource

win11-20240802-en

persistence privilege_escalation

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

EzExtractProShell32.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

EzExtractProShell32.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

EzExtractProCoreDll.dll
Size

1.9MB
MD5

ede6796697abfd295b96322048642a69
SHA1

d0e7aaa407c4576eee42032bf743e9194a9c21e7
SHA256

6f9b0b8e8d1efbe25b81b0676a5902ec97aac1bfdc84a1a2d1b58659eb44dc5d
SHA512

88daf23e91c542c7348aa5c0fd16d382ef2fa95d7d5f91a4d5e39cf5d5b361eeaf4f33fcb43a71b52e4cea20c2b9dcb2b4e909d7ca3e5ab0c6d569f672dd385f
SSDEEP

24576:8diAakp5QsUmDCKTgo/A1HGFnpzRsFDEDmCjJMcqvbBHwrqRh:8d9p5QXwAxGFpz2EDmeJp8bX

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\EzExtractProCoreDll.dll,#1
1⤵
PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy