6bcefb0164c0ef29720dce27bd19ac87d81d6fb3393235050a5e31cbf2fe64c7 | Triage

Submit
Reports

Overview

overview

Static

static

3

validClien...xy.exe

windows7-x64

validClien...xy.exe

windows10-2004-x64

validClien...re.dll

windows7-x64

1

validClien...re.dll

windows10-2004-x64

1

validClien...rk.dll

windows7-x64

1

validClien...rk.dll

windows10-2004-x64

1

validClien...64.dll

windows7-x64

1

validClien...64.dll

windows10-2004-x64

1

validClien...64.dll

windows7-x64

1

validClien...64.dll

windows10-2004-x64

1

validClien...40.dll

windows7-x64

1

validClien...40.dll

windows10-2004-x64

1

validClien..._1.dll

windows7-x64

1

validClien..._1.dll

windows10-2004-x64

1

validClien...64.dll

windows7-x64

1

validClien...64.dll

windows10-2004-x64

1

validClien...40.dll

windows7-x64

1

validClien...40.dll

windows10-2004-x64

1

validClien..._1.dll

windows7-x64

1

validClien..._1.dll

windows10-2004-x64

1

Resubmissions

26-11-2024 04:31

241126-e5gp3a1mbj 10

21-10-2024 21:18

241021-z5yzkaxcng 10

Analysis

max time kernel
138s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
21-10-2024 21:18

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

validClient_debug/EASteamProxy.exe

Resource

win7-20241010-en

remcos octubre 21 muchacha discovery rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

validClient_debug/EASteamProxy.exe

Resource

win10v2004-20241007-en

remcos octubre 21 muchacha discovery rat

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

validClient_debug/Qt5Core.dll

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

validClient_debug/Qt5Core.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

validClient_debug/Qt5Network.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

validClient_debug/Qt5Network.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

validClient_debug/libcrypto-1_1-x64.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

validClient_debug/libcrypto-1_1-x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

validClient_debug/libssl-1_1-x64.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

validClient_debug/libssl-1_1-x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

validClient_debug/msvcp140.dll

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

validClient_debug/msvcp140.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

validClient_debug/msvcp140_1.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

validClient_debug/msvcp140_1.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

validClient_debug/steam_api64.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

validClient_debug/steam_api64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

validClient_debug/vcruntime140.dll

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

validClient_debug/vcruntime140.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

validClient_debug/vcruntime140_1.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

validClient_debug/vcruntime140_1.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

validClient_debug/msvcp140_1.dll
Size

34KB
MD5

69d96e09a54fbc5cf92a0e084ab33856
SHA1

b4629d51b5c4d8d78ccb3370b40a850f735b8949
SHA256

a3a1199de32bbbc8318ec33e2e1ce556247d012851e4b367fe853a51e74ce4ee
SHA512

2087827137c473cdbec87789361ed34fad88c9fe80ef86b54e72aea891d91af50b17b7a603f9ae2060b3089ce9966fad6d7fbe22dee980c07ed491a75503f2cf
SSDEEP

384:z1vZLMtUYqOoKFYpWcm5gW/ki0pSt+eB+Hj+R9zUkUTRtHRN7SoHR9zui5TJ:zpCtzqOjKYWi0QKHji9zSRtnx9zJTJ

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\validClient_debug\msvcp140_1.dll,#1
1⤵
PID:3340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy