Overview

overview

10

Static

static

7

Bandicam 7...m].rar

windows11-21h2-x64

10

Bandicam 7...up.exe

windows11-21h2-x64

9

$PLUGINSDI...al.ini

windows11-21h2-x64

3

$PLUGINSDI...er.bmp

windows11-21h2-x64

3

$PLUGINSDI...rd.bmp

windows11-21h2-x64

3

bandicam.ini

windows11-21h2-x64

3

bdcamvk32.json

windows11-21h2-x64

3

bdcamvk64.json

windows11-21h2-x64

3

data/camera.wav

windows11-21h2-x64

6

data/effec...10.dat

windows11-21h2-x64

3

data/effec...15.dat

windows11-21h2-x64

3

data/effec...20.dat

windows11-21h2-x64

3

data/effec...30.dat

windows11-21h2-x64

3

data/effec...10.dat

windows11-21h2-x64

3

data/effec...15.dat

windows11-21h2-x64

3

data/effec...20.dat

windows11-21h2-x64

3

data/effec...30.dat

windows11-21h2-x64

3

data/language.dat

windows11-21h2-x64

3

data/langu...ix.dat

windows11-21h2-x64

3

data/lclick.wav

windows11-21h2-x64

6

data/rclick.wav

windows11-21h2-x64

6

data/sample.png

windows11-21h2-x64

3

data/skin.zip

windows11-21h2-x64

1

data/start.wav

windows11-21h2-x64

6

data/stop.wav

windows11-21h2-x64

6

encap64.dll

windows11-21h2-x64

1

lang/Japanese.ps1

windows11-21h2-x64

3

Bandicam 7...eg.rar

windows11-21h2-x64

1

Visit www....om.url

windows11-21h2-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    12/10/2024, 17:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    encap64.dll

  • Size

    223KB

  • MD5

    3a9c5ba1cd79752bcd6e3bad59645c89

  • SHA1

    e7bb57a7ffb19bb3623f99275621124c73de79d8

  • SHA256

    2761566fafad890783483069d7070592b25269d8fdc16d796115a4262aac9bd6

  • SHA512

    0b82d7524158e6a7d38413f0059bb3230a7fe1cae825cf4d9ab3f69de7994ff7b7941c0407e3beb90abb21334cb0927ac6197c0fdb8817449505887fd8d4a412

  • SSDEEP

    3072:s7ZIsHYwvPrBJ2vcPWZ95BEL4IJk5iAdv++zdJknoDfgTjMc48FVd5:yIsHYS32vcPWZ964YOiGW+dgTAcr/

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\encap64.dll,#1
    1⤵
      PID:4304

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads