Overview

overview

10

Static

static

3

281024afqk...).appx

windows7-x64

281024afqk...).appx

windows10-2004-x64

10

PsfLauncher32.exe

windows7-x64

1

PsfLauncher32.exe

windows10-2004-x64

3

PsfLauncher64.exe

windows7-x64

1

PsfLauncher64.exe

windows10-2004-x64

1

PsfRunDll32.exe

windows7-x64

1

PsfRunDll32.exe

windows10-2004-x64

3

PsfRunDll64.exe

windows7-x64

1

PsfRunDll64.exe

windows10-2004-x64

1

PsfRuntime32.dll

windows7-x64

3

PsfRuntime32.dll

windows10-2004-x64

3

PsfRuntime64.dll

windows7-x64

1

PsfRuntime64.dll

windows10-2004-x64

1

StartingSc...er.ps1

windows7-x64

3

StartingSc...er.ps1

windows10-2004-x64

3

VFS/Progra...13.exe

windows7-x64

3

VFS/Progra...13.exe

windows10-2004-x64

3

VFS/Progra...za.dll

windows7-x64

3

VFS/Progra...za.dll

windows10-2004-x64

3

VFS/Progra...xa.dll

windows7-x64

3

VFS/Progra...xa.dll

windows10-2004-x64

3

VFS/Progra...ar.dll

windows7-x64

3

VFS/Progra...ar.dll

windows10-2004-x64

3

VFS/Progra...64.dll

windows7-x64

1

VFS/Progra...64.dll

windows10-2004-x64

1

VFS/Progra...me2.7z

windows7-x64

1

VFS/Progra...me2.7z

windows10-2004-x64

1

VFS/Progra...ar.dll

windows7-x64

1

VFS/Progra...ar.dll

windows10-2004-x64

1

VFS/Progra...za.dll

windows7-x64

1

VFS/Progra...za.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2024 04:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    VFS/ProgramFilesX64/13/Far/7-ZipFar64.dll

  • Size

    458KB

  • MD5

    f8c737ca365dbbae5e0010e75bd641b3

  • SHA1

    997b00a5807ffff06298b11e6c5cd427dc8d2402

  • SHA256

    05c932f7c7391ba29b3dec39a7e273a9b51f1c6bd75b0aa942c08e1fa91dced8

  • SHA512

    5f632dc5f85eab78ba7030be0347e497e309c4ebf109fb765368171ad5e56361f797bc742b25b1296240a02ed55eb4c14b76be849149b3b6367a00792fcdc7be

  • SSDEEP

    12288:SkQxAVquWibWM1ysXvTz4NaGVg/6k+VrKk:lqni6M1yovTz4NaGY6nRK

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\VFS\ProgramFilesX64\13\Far\7-ZipFar64.dll,#1
    1⤵
      PID:5108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads