Overview

overview

10

Static

static

10

EXMPremium...ty.exe

windows7-x64

7

EXMPremium...ty.exe

windows10-2004-x64

8

EXMPremium...ty.exe

windows7-x64

7

EXMPremium...ty.exe

windows10-2004-x64

8

System.Management.dll

windows7-x64

1

System.Management.dll

windows10-2004-x64

1

batchcolle...ver.py

windows7-x64

3

batchcolle...ver.py

windows10-2004-x64

3

batchcolle...a3.ps1

windows7-x64

3

batchcolle...a3.ps1

windows10-2004-x64

3

batchcolle...a5.ps1

windows7-x64

3

batchcolle...a5.ps1

windows10-2004-x64

3

batchcolle...d8.ps1

windows7-x64

3

batchcolle...d8.ps1

windows10-2004-x64

3

batchcolle...c3.ps1

windows7-x64

3

batchcolle...c3.ps1

windows10-2004-x64

3

mongocrypt.dll

windows7-x64

1

mongocrypt.dll

windows10-2004-x64

1

setup.bat

windows7-x64

1

setup.bat

windows10-2004-x64

1

start.bat

windows7-x64

1

start.bat

windows10-2004-x64

1

Analysis

  • max time kernel
    132s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2024 08:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    mongocrypt.dll

  • Size

    4.3MB

  • MD5

    0cf27a123c4f51d1992dbf1a92218680

  • SHA1

    0367381d9206ab869e9c9fd178378e641d30acce

  • SHA256

    ac8c1db990bd2c5612b2929c097ed5c3e4bc047158d9d7a39c57723c614dd51e

  • SHA512

    faab924d5d802bd25a909741e49b89e6711f38829fdd6fc874cf75bf9e17ffdf40f51e5c50cbca5ee9c79c370c6c7268cf817161e92766dbcc8a4336f3a73683

  • SSDEEP

    49152:OSPj1pOaQ+YYkQ1Nk70RAgO53XkuqF1C3LZjSdFGKrb8c+l66LmzoxuLvxuLuxuU:NPj1pOaVYYOkuW6lGGKrb8c2vKzocF

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\mongocrypt.dll,#1
    1⤵
      PID:3004

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads