507641e3047216809af93a127af70a266e273cd95c1cfaa06605a753b9166388 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

Delta V3.61.zip

windows10-2004-x64

7

Delta V3.61.zip

windows10-ltsc 2021-x64

1

Delta V3.61/Delta.exe

windows10-2004-x64

6

Delta V3.61/Delta.exe

windows10-ltsc 2021-x64

6

Delta V3.6...it.dll

windows10-2004-x64

1

Delta V3.6...it.dll

windows10-ltsc 2021-x64

1

Delta V3.6...on.dll

windows10-2004-x64

1

Delta V3.6...on.dll

windows10-ltsc 2021-x64

1

Delta V3.6...90.dll

windows10-2004-x64

3

Delta V3.6...90.dll

windows10-ltsc 2021-x64

3

Delta V3.6...92.dll

windows10-2004-x64

3

Delta V3.6...92.dll

windows10-ltsc 2021-x64

3

Delta V3.6...PI.dll

windows10-2004-x64

3

Delta V3.6...PI.dll

windows10-ltsc 2021-x64

3

Delta V3.6...ua.xml

windows10-2004-x64

1

Delta V3.6...ua.xml

windows10-ltsc 2021-x64

3

Delta V3.6...s.json

windows10-2004-x64

3

Delta V3.6...s.json

windows10-ltsc 2021-x64

3

Delta V3.6...rs.txt

windows10-2004-x64

1

Delta V3.6...rs.txt

windows10-ltsc 2021-x64

1

Delta V3.6...re.txt

windows10-2004-x64

1

Delta V3.6...re.txt

windows10-ltsc 2021-x64

1

Resubmissions

07-11-2024 21:24

241107-z8z12ayfnb 8

07-11-2024 21:23

241107-z8jdaa1pdl 6

07-11-2024 21:21

241107-z7ptnsyjdx 7

Analysis

max time kernel
431s
max time network
1155s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2024 21:21

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Delta V3.61.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Delta V3.61.zip

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

2 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Delta V3.61/Delta.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

12 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Delta V3.61/Delta.exe

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

12 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Delta V3.61/ICSharpCode.AvalonEdit.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Delta V3.61/ICSharpCode.AvalonEdit.dll

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Delta V3.61/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Delta V3.61/Newtonsoft.Json.dll

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Delta V3.61/bin/590.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Delta V3.61/bin/590.dll

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

4 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Delta V3.61/bin/592.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Delta V3.61/bin/592.dll

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

4 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Delta V3.61/bin/Fluxteam_net_API.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Delta V3.61/bin/Fluxteam_net_API.dll

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

3 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Delta V3.61/bin/lua.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Delta V3.61/bin/lua.xml

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

5 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Delta V3.61/bin/modules.json

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Delta V3.61/bin/modules.json

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

3 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Delta V3.61/bin/vers.txt

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Delta V3.61/bin/vers.txt

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Delta V3.61/scripts/Put your own scripts in here.txt

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Delta V3.61/scripts/Put your own scripts in here.txt

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

Delta V3.61/bin/lua.xml
Size

3KB
MD5

e2b537e027b3251fb82e213739e66376
SHA1

e47888a238dcf90097ecd3c8860b0f9b02ded0e3
SHA256

5c508701141f851aeb0ad9088759f7da15bc33f9e7459ea8c8d4e1ec7b4eaa60
SHA512

1e347301cdc75933d709eddeace7cc9d62a7e9685f5badde3e1ec6f3cdbb37bbb8b95c23632e11b283e0464ab4c84e79c644660a1f0c09f51729e30571555f7e

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Delta V3.61\bin\lua.xml"
1⤵
PID:1264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1264-0-0x00007FF8DFBD0000-0x00007FF8DFBE0000-memory.dmp

Filesize
64KB

Download
memory/1264-1-0x00007FF91FBED000-0x00007FF91FBEE000-memory.dmp

Filesize
4KB

Download
memory/1264-2-0x00007FF91FB50000-0x00007FF91FD45000-memory.dmp

Filesize
2.0MB

Download
memory/1264-3-0x00007FF91FB50000-0x00007FF91FD45000-memory.dmp

Filesize
2.0MB

Download

© 2018-2024

Terms | Privacy