Overview

overview

10

Static

static

10

dba8e94820...3N.exe

windows7-x64

10

dba8e94820...3N.exe

windows10-2004-x64

10

$PLUGINSDI...SC.dll

windows7-x64

3

$PLUGINSDI...SC.dll

windows10-2004-x64

3

ETConnectServer.exe

windows7-x64

1

ETConnectServer.exe

windows10-2004-x64

1

ETConnectService.exe

windows7-x64

1

ETConnectService.exe

windows10-2004-x64

1

bin/MSLogonACL.exe

windows7-x64

1

bin/MSLogonACL.exe

windows10-2004-x64

3

bin/MSRC4Plugin.dll

windows7-x64

3

bin/MSRC4Plugin.dll

windows10-2004-x64

3

bin/SCHook.dll

windows7-x64

3

bin/SCHook.dll

windows10-2004-x64

3

bin/Secure...in.dll

windows7-x64

3

bin/Secure...in.dll

windows10-2004-x64

3

bin/authSSP.dll

windows7-x64

5

bin/authSSP.dll

windows10-2004-x64

3

bin/authadmin.dll

windows7-x64

3

bin/authadmin.dll

windows10-2004-x64

3

bin/ldapauth.dll

windows7-x64

3

bin/ldapauth.dll

windows10-2004-x64

3

bin/logging.dll

windows7-x64

5

bin/logging.dll

windows10-2004-x64

5

bin/logmessages.dll

windows7-x64

1

bin/logmessages.dll

windows10-2004-x64

1

bin/uvnc_settings.exe

windows7-x64

1

bin/uvnc_settings.exe

windows10-2004-x64

1

bin/vnchooks.dll

windows7-x64

3

bin/vnchooks.dll

windows10-2004-x64

3

bin/vncviewer.exe

windows7-x64

3

bin/vncviewer.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    25-11-2024 18:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/MSLogonACL.exe

  • Size

    83KB

  • MD5

    ec2273c02252baed0f71becc88db9ccd

  • SHA1

    bb1efb690141c4a031fe122099248648ef6e93ec

  • SHA256

    0b0c842031008e9b15ad84e92ba28e349c279204f524915464c1876c8a48ebf9

  • SHA512

    6f75455045da9f3893558aedb83f774c678bd4a371f94da71215cbec352c2da5c40b96c9a1cf9d9b5e245a8646a885a6db36202d58016190559182eee7300a50

  • SSDEEP

    1536:rTKjM0y2+gDqlYEOXoqRif7dbnsPHtf8rfCjQNkxHi/emjmbOwD8I:rTF3KyYEsoqRy5bs/dCNjubOwDP

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\bin\MSLogonACL.exe
    "C:\Users\Admin\AppData\Local\Temp\bin\MSLogonACL.exe"
    1⤵
      PID:3052

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads