Overview
overview
7Static
static
3FileZilla_...up.exe
windows10-2004-x64
5$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...id.dll
windows10-2004-x64
3$R0.dll
windows10-2004-x64
3$R2/NSIS.L...6_.exe
windows10-2004-x64
3$_36_.dll
windows10-2004-x64
3GPL.html
windows10-2004-x64
3filezilla.exe
windows10-2004-x64
7fzputtygen.exe
windows10-2004-x64
1fzsftp.exe
windows10-2004-x64
1fzstorj.exe
windows10-2004-x64
1libfilezilla-45.dll
windows10-2004-x64
1libfzclien...-1.dll
windows10-2004-x64
libfzclien...-1.dll
windows10-2004-x64
1libgcc_s_seh-1.dll
windows10-2004-x64
1libgmp-10.dll
windows10-2004-x64
1libgnutls-30.dll
windows10-2004-x64
1libhogweed-6.dll
windows10-2004-x64
1libnettle-8.dll
windows10-2004-x64
1libpng16-16.dll
windows10-2004-x64
1libsqlite3-0.dll
windows10-2004-x64
1libstdc++-6.dll
windows10-2004-x64
1wxbase32u_...om.dll
windows10-2004-x64
1wxbase32u_...om.dll
windows10-2004-x64
1wxmsw32u_a...om.dll
windows10-2004-x64
1wxmsw32u_c...om.dll
windows10-2004-x64
1wxmsw32u_x...om.dll
windows10-2004-x64
1Analysis
-
max time kernel
130s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/10/2024, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
FileZilla_3.67.1_win64_sponsored2-setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsis_appid.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$R0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
$R2/NSIS.Library.RegTool.v3.$_106_.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$_36_.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
GPL.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
filezilla.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
fzputtygen.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
fzsftp.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
fzstorj.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
libfilezilla-45.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
libfzclient-commonui-private-3-67-1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
libfzclient-private-3-67-1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
libgcc_s_seh-1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
libgmp-10.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
libgnutls-30.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
libhogweed-6.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
libnettle-8.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral25
Sample
libpng16-16.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
libsqlite3-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
libstdc++-6.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
wxbase32u_gcc_custom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
wxbase32u_xml_gcc_custom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
wxmsw32u_aui_gcc_custom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
wxmsw32u_core_gcc_custom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
wxmsw32u_xrc_gcc_custom.dll
Resource
win10v2004-20240802-en
General
-
Target
libfilezilla-45.dll
-
Size
930KB
-
MD5
1c56464f91cd70ccb7b4d52cd79f836a
-
SHA1
84a33a7af1643d5bb6b87f66d48d75525cde1b0a
-
SHA256
59c06c05fd3994c6c83108bd1d5c857beb835d4648bf1d706513b8579f6fdcd2
-
SHA512
1d756165c3ab25bd101754d81fa50ee26b4ef0635ba368b08535ac4a79c2f1b72c31ccb074ad4d58fca1ebad6cc6798d299546e815a2d41d37293a80636cb716
-
SSDEEP
12288:1qgQNIlOCK02NW+anampAWbLOa8i1S1FPffJvwzn1TkDtQfspA:1vaU12NmnjpHOpYdkDtQfspA
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libfilezilla-45.dll,#11⤵PID:2708
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4400,i,3210801877307184477,8078594481454001567,262144 --variations-seed-version --mojo-platform-channel-handle=1436 /prefetch:81⤵PID:4552