Overview

overview

6

Static

static

6

499ce7e26f...9a.exe

windows7-x64

4

499ce7e26f...9a.exe

windows10-2004-x64

4

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

PanoramaSt...ch.pdf

windows7-x64

3

PanoramaSt...ch.pdf

windows10-2004-x64

3

PanoramaSt...al.pdf

windows7-x64

3

PanoramaSt...al.pdf

windows10-2004-x64

3

PanoramaSt...ro.exe

windows7-x64

1

PanoramaSt...ro.exe

windows10-2004-x64

1

Qt5CoreR.dll

windows7-x64

1

Qt5CoreR.dll

windows10-2004-x64

1

Qt5GuiR.dll

windows7-x64

1

Qt5GuiR.dll

windows10-2004-x64

1

Qt5NetworkR.dll

windows7-x64

1

Qt5NetworkR.dll

windows10-2004-x64

1

Qt5PrintSupportR.dll

windows7-x64

1

Qt5PrintSupportR.dll

windows10-2004-x64

1

Qt5SvgR.dll

windows7-x64

1

Qt5SvgR.dll

windows10-2004-x64

1

Qt5WidgetsR.dll

windows7-x64

1

Qt5WidgetsR.dll

windows10-2004-x64

1

concrt140.dll

windows7-x64

1

concrt140.dll

windows10-2004-x64

1

filters.dll

windows7-x64

1

filters.dll

windows10-2004-x64

1

msvcp140.dll

windows7-x64

1

msvcp140.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-11-2024 09:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    msvcp140.dll

  • Size

    571KB

  • MD5

    57e1c539476b9e59919baea9f5fd61e9

  • SHA1

    9e856c8fd5ff6ec5681e28723e3d785d06095598

  • SHA256

    ef27a68bdc1ee3d5d9a6a720b656bfb7604a8fac6aceb245a6eadc2788686d9f

  • SHA512

    abfd8149c115c308321af9cb55c495a3b3d3cf1c8faa86e073fa42dd0c7aba9b1fb308d7bcdf8bde80a0254ffac86611bd9377e4d8bbbb638703cfbd7bee70c8

  • SSDEEP

    12288:PmyAf3QHr+vzkNNpiBfxzL63R+/EE9WoF8888/QEKZm+jWodEEVXD:Pmu+d/EVy8888/QEKZm+jWodEExD

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\msvcp140.dll,#1
    1⤵
      PID:2520

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads