Overview

overview

8

Static

static

3

b1naryn1nj...64.exe

windows10-2004-x64

4

$PLUGINSDI...er.bmp

windows10-2004-x64

7

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

Uninstall.exe.nsis

windows10-2004-x64

3

api-docs/_...ic.css

windows10-2004-x64

7

api-docs/_...ly.css

windows10-2004-x64

7

api-docs/_...d.woff

windows10-2004-x64

3

api-docs/_....woff2

windows10-2004-x64

3

api-docs/_...r.woff

windows10-2004-x64

3

api-docs/_....woff2

windows10-2004-x64

3

api-docs/_...nt.eot

windows10-2004-x64

3

api-docs/_...nt.xml

windows10-2004-x64

1

api-docs/_...nt.ttf

windows10-2004-x64

7

plugins/py...si.dll

windows10-2004-x64

1

plugins/py...ng.dll

windows10-2004-x64

1

plugins/py...ed.dll

windows10-2004-x64

1

plugins/py...ue.dll

windows10-2004-x64

1

plugins/py...et.dll

windows10-2004-x64

1

plugins/py...e3.dll

windows10-2004-x64

1

plugins/py...sl.dll

windows10-2004-x64

1

plugins/py...id.dll

windows10-2004-x64

1

plugins/py...fo.dll

windows10-2004-x64

1

plugins/py..._1.dll

windows10-2004-x64

1

plugins/py...-7.dll

windows10-2004-x64

1

plugins/py..._1.dll

windows10-2004-x64

1

plugins/py...at.dll

windows10-2004-x64

1

plugins/py...on.cat

windows10-2004-x64

8

plugins/py...on.exe

windows10-2004-x64

1

plugins/py...n3.dll

windows10-2004-x64

1

plugins/py...0._pth

windows10-2004-x64

3

plugins/py...10.dll

windows10-2004-x64

1

plugins/py...10.zip

windows10-2004-x64

1

Analysis

  • max time kernel
    136s
  • max time network
    314s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-12-2024 22:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    plugins/python/pyexpat.dll

  • Size

    194KB

  • MD5

    ea36d6df8ab58a22421f01d6d673adf2

  • SHA1

    6a22ea1f37e8655d1602823f18ac87727110a1b5

  • SHA256

    32e8c601259ec029e44824116ad911426157ceeae55f9fdd15387af40660dd5a

  • SHA512

    d23b7b4f46e99fa4c93e6adba24e30d09c445e85c7b2eae93a6efbffc5d8be166908f7ba7edf7b3e5089e712a4ce8e5bcdc32610f59bda94b90dd01aa3601035

  • SSDEEP

    3072:3/Bgl2EaDek5E/L75LzZLgcRVpPJ6bLKyrRsE0WymON+HXNdNFNLycEOuypjnB/6:PcJkeka/5LhgcRVpYTruqymTHBBe

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\plugins\python\pyexpat.dll,#1
    1⤵
      PID:1660

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads