8e42aaf1c038c992a57bbeb607e21df8d7d2f40248c5b35cd431cac0a1b5c77f

Submit
Reports

Overview

overview

Static

static

autodist_p...lt.exe

windows7-x64

autodist_p...lt.exe

windows10-2004-x64

autodist_p...nt.exe

windows7-x64

autodist_p...nt.exe

windows10-2004-x64

autodist_p...1).exe

windows7-x64

autodist_p...1).exe

windows10-2004-x64

autodist_p...2).exe

windows7-x64

autodist_p...2).exe

windows10-2004-x64

autodist_p...ks.exe

windows7-x64

autodist_p...ks.exe

windows10-2004-x64

autodist_p...il.dll

windows7-x64

autodist_p...il.dll

windows10-2004-x64

autodist_p...at.dll

windows7-x64

autodist_p...at.dll

windows10-2004-x64

autodist_p...mp.exe

windows7-x64

autodist_p...mp.exe

windows10-2004-x64

autodist_p...ib.dll

windows7-x64

autodist_p...ib.dll

windows10-2004-x64

autodist_p...nt.exe

windows7-x64

autodist_p...nt.exe

windows10-2004-x64

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
12-11-2024 22:58

Sharing

Copy URL

Twitter E-mail

Static task

static1

quasar

3 signatures

Behavioral task

behavioral1

Sample

autodist_proproctor_M2/Client-built.exe

Resource

win7-20240903-en

quasar discovery evasion persistence spyware trojan

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral2

Sample

autodist_proproctor_M2/Client-built.exe

Resource

win10v2004-20241007-en

quasar discovery evasion persistence spyware trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral3

Sample

autodist_proproctor_M2/Client.exe

Resource

win7-20241010-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

autodist_proproctor_M2/Client.exe

Resource

win10v2004-20241007-en

quasar discovery spyware trojan

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

autodist_proproctor_M2/Clients/yamun@YAMUNA_A813E46/onlinetestwks (1).exe

Resource

win7-20240729-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

autodist_proproctor_M2/Clients/yamun@YAMUNA_A813E46/onlinetestwks (1).exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

autodist_proproctor_M2/Clients/yamun@YAMUNA_A813E46/onlinetestwks (2).exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

autodist_proproctor_M2/Clients/yamun@YAMUNA_A813E46/onlinetestwks (2).exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

autodist_proproctor_M2/Clients/yamun@YAMUNA_A813E46/onlinetestwks.exe

Resource

win7-20241023-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

autodist_proproctor_M2/Clients/yamun@YAMUNA_A813E46/onlinetestwks.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

autodist_proproctor_M2/Mono.Cecil.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

autodist_proproctor_M2/Mono.Cecil.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

autodist_proproctor_M2/Mono.Nat.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

autodist_proproctor_M2/Mono.Nat.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

autodist_proproctor_M2/Quasar.vmp.exe

Resource

win7-20240903-en

evasion trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral16

Sample

autodist_proproctor_M2/Quasar.vmp.exe

Resource

win10v2004-20241007-en

evasion trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

autodist_proproctor_M2/Vestris.ResourceLib.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

autodist_proproctor_M2/Vestris.ResourceLib.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

autodist_proproctor_M2/client.exe

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

autodist_proproctor_M2/client.exe

Resource

win10v2004-20241007-en

quasar discovery spyware trojan

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

autodist_proproctor_M2/Mono.Cecil.dll
Size

277KB
MD5

8df4d6b5dc1629fcefcdc20210a88eac
SHA1

16c661757ad90eb84228aa3487db11a2eac6fe64
SHA256

3e4288b32006fe8499b43a7f605bb7337931847a0aa79a33217a1d6d1a6c397e
SHA512

874b4987865588efb806a283b0e785fd24e8b1562026edd43050e150bce6c883134f3c8ad0f8c107b0fb1b26fce6ddcc7e344a5f55c3788dac35035b13d15174
SSDEEP

6144:iYOMWAEq+PAEwGQ9Xivs0s4EtS1Fv8jnLKdFvkPo2:AG+PpjQSHv8jA

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\autodist_proproctor_M2\Mono.Cecil.dll,#1
1⤵
PID:1304

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads