Overview
overview
10Static
static
10Vape/Plugi...in.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...es.dll
windows11-21h2-x64
1Vape/bin/M...es.dll
windows11-21h2-x64
1Vape/bin/M...es.dll
windows11-21h2-x64
1Vape/bin/M...ng.dll
windows11-21h2-x64
1Vape/bin/M...ng.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ry.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...on.dll
windows11-21h2-x64
1Vape/bin/M...el.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...tp.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ng.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...es.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ns.dll
windows11-21h2-x64
1Vape/bin/M...ng.dll
windows11-21h2-x64
1Vape/bin/M...rs.dll
windows11-21h2-x64
1Vape/bin/M...ta.dll
windows11-21h2-x64
1Vape/bin/M...ng.dll
windows11-21h2-x64
1Vape/bin/M...rs.dll
windows11-21h2-x64
1Vape/bin/l...es.dll
windows11-21h2-x64
1Vape/bin/l...es.dll
windows11-21h2-x64
1Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
19-12-2024 19:53
Behavioral task
behavioral1
Sample
Vape/Plugins/User_Login.dll
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
Vape/bin/Microsoft.AspNetCore.Hosting.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
Vape/bin/Microsoft.AspNetCore.Hosting.Server.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
Vape/bin/Microsoft.AspNetCore.Http.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
Vape/bin/Microsoft.AspNetCore.Http.Features.dll
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
Vape/bin/Microsoft.AspNetCore.WebUtilities.dll
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
Vape/bin/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
Vape/bin/Microsoft.CodeAnalysis.CSharp.Scripting.dll
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
Vape/bin/Microsoft.CodeAnalysis.Scripting.dll
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
Vape/bin/Microsoft.DotNet.PlatformAbstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
Vape/bin/Microsoft.Extensions.Caching.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral12
Sample
Vape/bin/Microsoft.Extensions.Caching.Memory.dll
Resource
win11-20241007-en
Behavioral task
behavioral13
Sample
Vape/bin/Microsoft.Extensions.Configuration.Abstractions.dll
Resource
win11-20241023-en
Behavioral task
behavioral14
Sample
Vape/bin/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral15
Sample
Vape/bin/Microsoft.Extensions.DependencyInjection.dll
Resource
win11-20241023-en
Behavioral task
behavioral16
Sample
Vape/bin/Microsoft.Extensions.DependencyModel.dll
Resource
win11-20241007-en
Behavioral task
behavioral17
Sample
Vape/bin/Microsoft.Extensions.FileProviders.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral18
Sample
Vape/bin/Microsoft.Extensions.Hosting.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral19
Sample
Vape/bin/Microsoft.Extensions.Http.dll
Resource
win11-20241023-en
Behavioral task
behavioral20
Sample
Vape/bin/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral21
Sample
Vape/bin/Microsoft.Extensions.Logging.dll
Resource
win11-20241023-en
Behavioral task
behavioral22
Sample
Vape/bin/Microsoft.Extensions.Options.dll
Resource
win11-20241007-en
Behavioral task
behavioral23
Sample
Vape/bin/Microsoft.Extensions.Primitives.dll
Resource
win11-20241007-en
Behavioral task
behavioral24
Sample
Vape/bin/Microsoft.IdentityModel.Abstractions.dll
Resource
win11-20241007-en
Behavioral task
behavioral25
Sample
Vape/bin/Microsoft.IdentityModel.JsonWebTokens.dll
Resource
win11-20241007-en
Behavioral task
behavioral26
Sample
Vape/bin/Microsoft.IdentityModel.Logging.dll
Resource
win11-20241007-en
Behavioral task
behavioral27
Sample
Vape/bin/Microsoft.Net.Http.Headers.dll
Resource
win11-20241007-en
Behavioral task
behavioral28
Sample
Vape/bin/Microsoft.Scripting.Metadata.dll
Resource
win11-20241023-en
Behavioral task
behavioral29
Sample
Vape/bin/Microsoft.Scripting.dll
Resource
win11-20241007-en
Behavioral task
behavioral30
Sample
Vape/bin/Microsoft.Xaml.Behaviors.dll
Resource
win11-20241007-en
Behavioral task
behavioral31
Sample
Vape/bin/locales/cs/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
Resource
win11-20241007-en
Behavioral task
behavioral32
Sample
Vape/bin/locales/cs/Microsoft.CodeAnalysis.CSharp.resources.dll
Resource
win11-20241007-en
General
-
Target
Vape/Plugins/User_Login.dll
-
Size
16KB
-
MD5
b5c01c4fac2d7ae45751adc27f54baf6
-
SHA1
14dbbcee9b3e1af22a7398bd872adbeb5117e288
-
SHA256
7c2ac23d3dd3321db0394894709cc41fbfc38737c76d1a67dc0776c1a1e5eda8
-
SHA512
83e6184473a7d070d0b97c89154c17b2312d1d595cfd80d305533edf8b6273d94fea8bf20c375cf98fc9145b18990c6827adead09e966556d41481a84e9feb34
-
SSDEEP
192:Ou3swS+adHkKOqZjKLDjZ14BJGj6waP+gUB/SWIeOhODZW6KSRwzNoL:dsVvdHJZGLD91GIyAa9OXLrL
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Vape\Plugins\User_Login.dll,#11⤵PID:4744
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2600