Analysis
-
max time kernel
32s -
max time network
143s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
04-10-2024 03:02
General
-
Target
rrapidware.exe
-
Size
47.3MB
-
MD5
b4dba0ef741f6d0b7aa910088f585677
-
SHA1
7f5bd322a1a913d08887779aa15ff7776834e212
-
SHA256
ff6dc0e85a05c1158258c91a02cd5dbe84cb3bcdb3d87ad188c88b4bf6bb09c5
-
SHA512
58c044b1d6dac82290161c0ba83e923fba3fe567180762705863b310253382608ef4e7a2124c1f5eacb759167c90b8bd3866ff8436eebd6f036946ba4ebb1700
-
SSDEEP
786432:0hPOPr+grF4li9gGdhDUey3b+VyPVLLpQJWN4CwouOzcY87Y9ctRL0QyBH4:0hmPiUFui9j0hLeyPlFQJWNt7E7Y9ctv
Malware Config
Signatures
-
Loads dropped DLL 37 IoCs
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\rrapidware.exe"C:\Users\Admin\AppData\Local\Temp\rrapidware.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\rrapidware.exe"C:\Users\Admin\AppData\Local\Temp\rrapidware.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"3⤵
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
735KB
MD532256f9488aa3063d84c2d77804c5096
SHA1f82af51cb1d3fa90902fb7550c74213cdd990d2e
SHA25668dfb20a436f3133c65a20189daa94b472a1ac0bd250f9dcbcd8dcf957cf8d32
SHA51250d7aaa534b544ed029479c07de2058385d0309cba9b197e52c4ea6df325b1ccbe613d7b77031c5aad6bc58f3e6611b21fe37f14192ef72144305d1d556e2b11
-
Filesize
576KB
MD501b946a2edc5cc166de018dbb754b69c
SHA1dbe09b7b9ab2d1a61ef63395111d2eb9b04f0a46
SHA25688f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5
SHA51265dc3f32faf30e62dfdecb72775df870af4c3a32a0bf576ed1aaae4b16ac6897b62b19e01dc2bf46f46fbe3f475c061f79cbe987eda583fee1817070779860e5
-
Filesize
30KB
MD50fe6d52eb94c848fe258dc0ec9ff4c11
SHA195cc74c64ab80785f3893d61a73b8a958d24da29
SHA256446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f
SHA512c39a134210e314627b0f2072f4ffc9b2ce060d44d3365d11d8c1fe908b3b9403ebdd6f33e67d556bd052338d0ed3d5f16b54d628e8290fd3a155f55d36019a86
-
Filesize
2.3MB
MD54a5d76a86bd8e8e3f72a3dfee2a2a6eb
SHA13d4c86aa6a8d918ba3d5996e6e232e7adc94c184
SHA256eadd9e3ac9e7a0bb36ac12fe211733325fc75a074c751967d4554180f107e532
SHA5123af6f6247b1457d2341ca87bce673874599e97b1b302f94b10945d70313158f3ae59c484784d3e745e21a95b9b772d11c1d189b75df1939ddfcd8e8aa820a040
-
Filesize
43KB
MD56bc084255a5e9eb8df2bcd75b4cd0777
SHA1cf071ad4e512cd934028f005cabe06384a3954b6
SHA2561f0f5f2ce671e0f68cf96176721df0e5e6f527c8ca9cfa98aa875b5a3816d460
SHA512b822538494d13bda947655af791fed4daa811f20c4b63a45246c8f3befa3ec37ff1aa79246c89174fe35d76ffb636fa228afa4bda0bd6d2c41d01228b151fd89
-
Filesize
483KB
MD5dee7f653ab1d70eee85381e42217eff3
SHA1be6cc54cb0f5ddcd6df9e49a73c414d5bcc82176
SHA25691dc4e85b200827cc0848f0cfea6a60054e50e22efea034b10151c0c19f1763c
SHA512d80aaeee4d89f12834321c72e79da6f34039d50f73ea8a9dcbeef71dec05cd1d3fca02172fbb90a8e5b78a664d319b280be080ac743d0e9af05b9d74d5026783
-
Filesize
51KB
MD531cb0ae64c96ac0f1f6e6852f3a158d4
SHA16f004af860ad584eaf2d90474cbda6e3af2ca93d
SHA256ebabe0c639a5a2e4a90888e3c9978552038d46883bce7fe6e0f3cbbfc589659b
SHA512be498cee12f0e8e4e8896fb9169001b243c9610c9ad6d3580a89941e2c02f2de5c627ec8e3f331039bc3f1e35a87ce039d72cd3f334566a54d4a1798afb57f52
-
Filesize
106KB
MD549c96cecda5c6c660a107d378fdfc3d4
SHA100149b7a66723e3f0310f139489fe172f818ca8e
SHA25669320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc
SHA512e09e072f3095379b0c921d41d6e64f4f1cd78400594a2317cfb5e5dca03dedb5a8239ed89905c9e967d1acb376b0585a35addf6648422c7ddb472ce38b1ba60d
-
Filesize
48KB
MD5cf0a1c4776ffe23ada5e570fc36e39fe
SHA12050fadecc11550ad9bde0b542bcf87e19d37f1a
SHA2566fd366a691ed68430bcd0a3de3d8d19a0cb2102952bfc140bbef4354ed082c47
SHA512d95cd98d22ca048d0fc5bca551c9db13d6fa705f6af120bbbb621cf2b30284bfdc7320d0a819bb26dab1e0a46253cc311a370bed4ef72ecb60c69791ed720168
-
Filesize
36KB
MD527b3203ca6f24cccb88361a3880b1635
SHA15273300922a7a4ef5d2f38066b53cde18c766137
SHA2561351e74fe0041a6813eb722ed2edb54a227ca9220c8ffcea9febd947167dcf53
SHA512956f52a024b3840f766766c39c12fb84ee6e7ccace761475a4d9cdfd1264743b82223f3f96e8726e5c5a9813f061a5ea7bb5cdb8373c877b5a3c1b5cba92c809
-
Filesize
48KB
MD53daeb82293033d1b0a0ca32cab80f7d8
SHA1fe44d94eb1e672c95915ef37963a258bec01809d
SHA256395726ae7f71e9447f8661eae3016ca5af51a19121206cf5ff8b6bb04613ee09
SHA512d881a2d4b4d3903bfceb656e9f883bc8c157b25e6875fe5e2768df425390679f67d08483153dee90857267a334da12bc8880e3db4c921d903f508e9b14e413cd
-
Filesize
71KB
MD555ee36964cfb1cb5c4a13762722e6b8e
SHA1b7337e1aeac9bec9daffac43bcb881011f9eded9
SHA256b346624f456f5297696e9708fa44a5473c1dc53443d14e6b5330cf191ca2d766
SHA512337462452c576fa1001c750df5af943a9efebf0409246849d700b6c2e2766ed2c4bf46ca7027d2e37bf1f949525fca682ee322ac7867e0b5525be9054c10c24a
-
Filesize
58KB
MD56c4d3cdb221c23c4db584b693f26c2b2
SHA17dab06d992efa2e8ca9376d6144ef5ee2bbd6514
SHA25647c6c4b2d283aec460b25ec54786793051e515a0cbc37c5b66d1a19c3c4fb4ac
SHA5125bdb1c70af495d7dc2f770f3d9ceecaa2f1e588338ebd80a5256075a7b6383e227f8c6b7208066764925fb0d56fa60391cef168569273642398da419247fbe76
-
Filesize
106KB
MD5acf11f90bde7305212cde3d2fb99d769
SHA152ec2dd06436c8e527bf3f74e3298a8888df2f00
SHA256d27995ef1dbfbf664fcdd8cc28ba4d5d28db591269cbb23bf50e35b905cd4b18
SHA51231b5756022f16b8f25f1d9607eea121098a76286b3c6f3216a3ca19d147454c0202ed4ca32748ed4b2e3d7197b38a7147c3f6ad72cda511d0ae830dba2cd4bd9
-
Filesize
35KB
MD59bb780d72e8d3ab2516a24c87124e66b
SHA167b820cd491ced5ef2eea2b4896ddd779fb69d8a
SHA256c04f1c575e8e0a0eee49e39ac124b055b8f1154bed1fc5177bbb6f9049ac5099
SHA512716c74312f90e32e572affbd9f71c36c05e6ce194e5467e7fbe9ba5a6ce28566276d435b3d3f798aa7899c716a2b1db6bf2216c816b3171d4d47beebedd03ad0
-
Filesize
85KB
MD58e7c2f1fe870eb6deedded27e831bea7
SHA18004120a258758f3a89d96d7dfbaf31f9a2f4cd0
SHA25656551afcf090a43ecbc605f531b82ce7d3d216fa69502c4edb3c8197d4173781
SHA512af34f4f7a44d2d7d9b163ed98b22b24cbddc4a4d2ff1237b3037d9ad46c3be98698a647a217b427224e1d108c87de107ac2be19a4f4856412963b15c8be67b8b
-
Filesize
26KB
MD515485dc72f1689610f906472520c072e
SHA16e5cd14ebf2055f76f4e246226857ab8b3f62c08
SHA256c64038158d553c3ac3886f303b7f09c92cb9ce80dea0aa914d2ed39010c9e830
SHA512f9facea56a50d250d02c24c0f02eb4f0e3f8e3121d0cc9fd1d0f35d95c623b3c1ba8068a8bb4b752cade64bca5eb5ca8e7222e57fa1cace5e785c3adf2cfbe10
-
Filesize
32KB
MD5f50f93a9a8de4846c24e8208564b5606
SHA11ebea86481c43131bc54e1534b156f10dacbe8f8
SHA256407bc642537c3f4ba83e0d43c7c847ed9ff83e4b9ed7cd7b76afc9bab1635908
SHA5124e4ff60e509148d53b32e68cec4b5be75bc13da39eb1fd1d6541ebb399e8c554fac998682b60b2e94bab18aab0126e11d8bfd086c8d9b58879834cec6c6bd17f
-
Filesize
25KB
MD57fcbdb091c6ee4094e16015c80f90d62
SHA14c2296af588d87b36f1dec830edde8ac9f8e85d6
SHA25616dd9f44c1cf0b9928ce517bc6ad490be2c8872d81551cae26743a1977660a47
SHA512442c786c288a4a873b707c1f81bfbb27b5c073950c557860fa0059b866b2e473d26d0f847380d9ec206c2e7af8a37a2685d61ec123f91476ace32bd29ba15516
-
Filesize
43KB
MD509753e347d110ae9b737513ae70b058e
SHA148a952673c1d75836e390de4a54015a5a39302cd
SHA25616987a489a9dc6cc287a85657390cec72fe9a307b60bb1e1d1228f179657466c
SHA512e71e12a02873f187c36cda3cceeca9d5300bfd8824d3d693da33d0022c4be9945058ca528b65d5947597124f317b01a5a627c2946e2d396326a43c59426a9d7d
-
Filesize
65KB
MD549bfcbab058c562293d0431f83ee9906
SHA1864f9b3611e13f06a520e8218ba4f15187b85455
SHA256adc9f76b8a1339904788648096714207427f6e252c624905a2f29273df3d15d7
SHA5123984dd1d195428d003612a50840ee9ee9fa355061c1bad65c660998d6b0bc411b5de5f450e976b73a52d333568865466daf053c3fb56a9d5ef0a78c2eb1e46b8
-
Filesize
1.4MB
MD532ede00817b1d74ce945dcd1e8505ad0
SHA151b5390db339feeed89bffca925896aff49c63fb
SHA2564a73d461851b484d213684f0aadf59d537cba6fe7e75497e609d54c9f2ba5d4a
SHA512a0e070b2ee1347e85f37e9fd589bc8484f206fa9c8f4020de147b815d2041293551e3a14a09a6eb4050cfa1f74843525377e1a99bbdcfb867b61ebddb89f21f7
-
Filesize
1.8MB
MD57fbfaa152800a35eaad48a492230b30e
SHA1779e8bc107cee41a4b3f198fa234375ad4fb4c59
SHA2566bf0062a0888d0613e28276afdb64a6549a73ed2372ae9abb41d0d2944ca6eca
SHA51237ac4596343c242ad2b5316d8aabd8bb41a75bf4878861f2ad87baa7d38fa4e14e558cb0566c4743fe001a433c2845879a0b8a5d4cb0ecf7ef27fb9f66341851
-
Filesize
1.6MB
MD5dc3f863a7228fd4954bf7f679177b570
SHA1a604e82e362e75e0d27309b7b3838cdb03b4e458
SHA25665e8d5b2daf725031ca1242f640978422b7109c81c2c1b69ecdbc7ed5b65fafa
SHA512a0d8fed4cca8a933b1745b0a4f911973e7af55c27101f37f97bf90dd0c260c9a73835c5584c3582c4eba6b494912282d757534ce3cd22efbf897e2bedd6db9f9
-
Filesize
29KB
MD5be8ceb4f7cb0782322f0eb52bc217797
SHA1280a7cc8d297697f7f818e4274a7edd3b53f1e4d
SHA2567d08df2c496c32281bf9a010b62e8898b9743db8b95a7ebee12d746c2e95d676
SHA51207318c71c3137114e0cfec7d8b4815fd6efa51ce70b377121f26dc469cefe041d5098e1c92af8ed0c53b21e9c845fddee4d6646d5bd8395a3f1370ba56a59571
-
Filesize
223KB
MD54004cea042e568ba151d820811663146
SHA14480661d5973a727eb20eedf2e41a7301f15854a
SHA256aec1a570f551d348b6e241dcc938b1e3d27f0148a875729dca19126511c4ba75
SHA512da697b3da8bd6e6847192526ee50389662d67b5e5c48b95beb94bea8b9e778abdcf6af32e773bd8196dd3dcafa3d9185b7683d0a31024ba3ed8bd11089a298c5
-
Filesize
87KB
MD596c18c0fbb57cd8faf349dbbd3b540aa
SHA198903f7b2ac131bc99e285c33d8969810362d3b9
SHA256497bd7c8c035bc38ac412bea5bfbef7e83939f8d1f4c3702e4e78e42b157217d
SHA512f5f360d3bf3cdb4f00424a383e3cd929691f6fa1202e18f3bbcd80cb626bff8cb8b6c2b6841ef2df3b1368deead0f5668ce399f570a98d841bb4151ccc75afdf
-
Filesize
65KB
MD50e105f62fdd1ff4157560fe38512220b
SHA199bd69a94b3dc99fe2c0f7bbbcd05aa0bc8cd45c
SHA256803ba8242b409080df166320c05a4402aab6dd30e31c4389871f4b68ca1ad423
SHA51259c0f749ed9c59efdbcd04265b4985b1175fdd825e5a307745531ed2537397e739bc9290fdc3936cfd04f566e28bb76b878f124248b8344cf74f641c6b1101de
-
Filesize
1.6MB
MD51dee750e8554c5aa19370e8401ff91f9
SHA12fb01488122a1454aa3972914913e84243757900
SHA256fd69ba232ba3b03e8f5faea843919a02d76555900a66a1e290e47bc8c0e78bfa
SHA5129047a24a6621a284d822b7d68477c01c26dc42eccc4ccc4144bfd5d92e89ea0c854dc48685268f1ae3ca196fd45644a038a2c86d4c1cc0dbf21ca492aece0c9e
-
Filesize
193KB
MD5471d17f08b66f1489516d271ebf831e3
SHA10296e3848de8e99c55bab82c7b181112fb30e840
SHA25639f4e62d0366897e20eb849cdc78f4ea988605ba86a95c9c741f2797086a6788
SHA512857a92588f3363ce9e139fe92222ece6d7d926fdcb2c5c1febfb6328389f3e5f8b82063aface5b61015de031e6bfda556067f49f9cc8103664749d8581da1587
-
Filesize
62KB
MD504ce7664658c9c18527594708550d59e
SHA11db7e6722aaea33d92fba441fca294600d904103
SHA256e3be247830c23a1751e1bab98d02ba5da3721d2a85469eda3764fc583ca2a6ff
SHA512e9744b2eee5fa848d5ac83622a6b1c1a1009d7ad8a944bda7a118dd75d8d24218fa2e4ef67718caabda0dd67efdd5be1497705afef8edec830f1b2402d0f0a8b
-
Filesize
25KB
MD5ebfab2efaabc4de66387ac563ad8c534
SHA17335e23acabe2efd8ce3314d63887ed7ccbb983e
SHA256a753d99b2cc2de8726c77d0a7e5871f0abe3fed09e0f0c956b6f42b1f9a3552f
SHA512d083c4f71f8f83b08bb21bf38a3b6b18e16ec8e1515c36ff738bedad5414e61727342d82b037c7d06f86b1f8e410a0a4f128cb734b3932db69fd6308c84649cd
-
Filesize
295KB
MD5b99f228df5c2d18f818dc8621404c35d
SHA126147b9a850c818790aefdfc55eb102eeb87631e
SHA256aabb773aad695dd65a9595976b9a507ec2bcb68eee9cb7c30ee9be5b8038d895
SHA5129ebaca3fbbec89db228ac7cd872d84c6025fd93b1fe457b8047721b68987c368d0996514bfa08377868d9aad827d322c5dbef765589a87065d9e7a3603b8be39
-
Filesize
48KB
MD5d2668458d3a33de3fbe931eb029a3628
SHA1258351db3b6ce6ae80a428c2b5dc0a3f7cfa112a
SHA2562c37610d165a3c3c0350b08a5d803928267aa69878f753d2e2b048de4f3a7413
SHA512440b760300043938c1a3130baf667426d1dabdb6dab24581054c9d5ef213997183b0a317b4f846f277eabb07f7bd4d2cc42d90158511c904b7a78672869c641d
-
Filesize
204KB
-
Filesize
5.3MB
-
Filesize
160KB
-
Filesize
216KB
-
Filesize
100KB
-
Filesize
140KB
-
Filesize
6.3MB
-
Filesize
52KB
-
Filesize
184KB
-
Filesize
52KB
-
Filesize
5.9MB
-
Filesize
180KB
-
Filesize
752KB
-
Filesize
100KB
-
Filesize
100KB
-
Filesize
180KB
-
Filesize
172KB
-
Filesize
2.6MB
-
Filesize
60KB
-
Filesize
820KB
-
Filesize
5.1MB
-
Filesize
160KB
-
Filesize
5.1MB
-
Filesize
84KB
-
Filesize
216KB
-
Filesize
6.3MB
-
Filesize
72KB
-
Filesize
100KB
-
Filesize
140KB
-
Filesize
6.4MB
-
Filesize
5.9MB
-
Filesize
224KB
-
Filesize
184KB
-
Filesize
2.3MB
-
Filesize
752KB
-
Filesize
2.6MB
-
Filesize
8.4MB
-
Filesize
5.9MB
-
Filesize
204KB
-
Filesize
2.6MB
-
Filesize
820KB
-
Filesize
64KB
-
Filesize
5.1MB
-
Filesize
5.1MB
-
Filesize
5.3MB
-
Filesize
180KB
-
Filesize
100KB
-
Filesize
60KB
-
Filesize
140KB
-
Filesize
52KB
-
Filesize
8.4MB
-
Filesize
224KB
-
Filesize
6.4MB
-
Filesize
72KB
-
Filesize
84KB
-
Filesize
820KB
-
Filesize
752KB
-
Filesize
184KB
-
Filesize
52KB
-
Filesize
100KB
-
Filesize
216KB
-
Filesize
160KB
-
Filesize
6.3MB
-
Filesize
5.9MB
-
Filesize
2.3MB
-
Filesize
5.1MB
-
Filesize
204KB
-
Filesize
172KB
-
Filesize
2.6MB
-
Filesize
5.9MB
-
Filesize
2.6MB