Overview

overview

8

Static

static

1

SpyShelterSetup.exe

windows11-21h2-x64

8

$PLUGINSDIR/INetC.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDIR/sps.dll

windows11-21h2-x64

3

SpyShelter.exe

windows11-21h2-x64

4

SpyShelter.sys

windows11-21h2-x64

1

data/app.so

windows11-21h2-x64

3

data/flutt...ify.js

windows11-21h2-x64

3

flutter_de...in.dll

windows11-21h2-x64

1

flutter_windows.dll

windows11-21h2-x64

1

msvcp140.dll

windows11-21h2-x64

1

sps/sps.exe

windows11-21h2-x64

1

sps_helper.exe

windows11-21h2-x64

1

sps_service.exe

windows11-21h2-x64

1

tray_manag...in.dll

windows11-21h2-x64

1

url_launch...in.dll

windows11-21h2-x64

1

vcruntime140.dll

windows11-21h2-x64

1

vcruntime140_1.dll

windows11-21h2-x64

1

windows_si...in.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    91s
  • max time network
    96s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241023-en
  • resource tags

    arch:x64arch:x86image:win11-20241023-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14-11-2024 10:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    flutter_desktop_sleep_plugin.dll

  • Size

    91KB

  • MD5

    ae8bbd77a997d05c06e459f0f3faa5af

  • SHA1

    843ae129debba252eaebce0459adccddc1315826

  • SHA256

    9600697c57da5a1411a227eb5fc135f20d0ea292f458290d15fb959c1f75537e

  • SHA512

    13067ed69244f94206e642b408143409b48fb976221dbbbbdd86f0b357a8b7b0cad334a6259751a718f2149e183d322bb8b03e26abff2cdcac2826a551e27d2f

  • SSDEEP

    1536:yOCWkiWahkGF/g8+kAxfo7FBHFKSPvWIiHlHFConoc4J72BIr:ZCWkiW0pFJ+kA8nHkSPbqlHFConoc4Vl

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\flutter_desktop_sleep_plugin.dll,#1
    1⤵
      PID:3668

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads