Overview

overview

10

Static

static

10

641ba3b46d...18.exe

windows7-x64

7

641ba3b46d...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/98ipcap.bat

windows7-x64

4

$SYSDIR/98ipcap.bat

windows10-2004-x64

4

$SYSDIR/msvcp60.dll

windows7-x64

3

$SYSDIR/msvcp60.dll

windows10-2004-x64

3

$SYSDIR/npptools.dll

windows7-x64

3

$SYSDIR/npptools.dll

windows10-2004-x64

3

bin/DLmode.dll

windows7-x64

3

bin/DLmode.dll

windows10-2004-x64

3

bin/DelEntry.exe

windows7-x64

1

bin/DelEntry.exe

windows10-2004-x64

3

bin/Main.exe

windows7-x64

3

bin/Main.exe

windows10-2004-x64

3

bin/NetKeeper.exe

windows7-x64

3

bin/NetKeeper.exe

windows10-2004-x64

3

bin/NetKeeper.exe

windows7-x64

3

bin/NetKeeper.exe

windows10-2004-x64

3

bin/Updatemode.dll

windows7-x64

3

bin/Updatemode.dll

windows10-2004-x64

3

bin/bindconfirm.exe

windows7-x64

3

bin/bindconfirm.exe

windows10-2004-x64

3

bin/bmpres.dll

windows7-x64

1

bin/bmpres.dll

windows10-2004-x64

1

bin/detector.dll

windows7-x64

3

bin/detector.dll

windows10-2004-x64

3

bin/doload.dll

windows7-x64

3

bin/doload.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20-10-2024 20:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/DelEntry.exe

  • Size

    28KB

  • MD5

    5e118e80e9771f0ecd401cc6eb3ecd44

  • SHA1

    a918bb41e339e5f19fa237f00ed55cbdedf60f6a

  • SHA256

    78eafa3f5da69eea96fec9e6aac3c01ef26c42d0a941be0b7408aa52bedb2aa5

  • SHA512

    ecec88498fec0eebadd8a321d0139b8cc2e6a067a9f51f9179777b076bb98c569dac025a2bfaf55a6a93853c44cd370f21cfeaa106f4320db1653bf09924f3f7

  • SSDEEP

    384:o5T7vSqsl2w3jqeK7bAmlTOc6yJWrGruAWoTr:c7vi1jtK76lf4uVoT

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\bin\DelEntry.exe
    "C:\Users\Admin\AppData\Local\Temp\bin\DelEntry.exe"
    1⤵
      PID:2112

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads