Overview

overview

10

Static

static

10

1.exe

windows7-x64

10

1.exe

windows10-2004-x64

10

ClientPlugin.dll

windows7-x64

1

ClientPlugin.dll

windows10-2004-x64

1

NanoCore.exe

windows7-x64

3

NanoCore.exe

windows10-2004-x64

3

Payload.exe

windows7-x64

7

Payload.exe

windows10-2004-x64

7

PluginCompiler.exe

windows7-x64

3

PluginCompiler.exe

windows10-2004-x64

3

ServerPlugin.dll

windows7-x64

1

ServerPlugin.dll

windows10-2004-x64

1

System.Dat...te.dll

windows7-x64

1

System.Dat...te.dll

windows10-2004-x64

1

client.exe

windows7-x64

10

client.exe

windows10-2004-x64

10

x64/SQLite...op.dll

windows7-x64

1

x64/SQLite...op.dll

windows10-2004-x64

1

x86/SQLite...op.dll

windows7-x64

3

x86/SQLite...op.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    23-12-2024 20:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    x64/SQLite.Interop.dll

  • Size

    1.3MB

  • MD5

    382398711315e2fa8e93d305b4873908

  • SHA1

    51482242e6d9170963aa27192c8279d20fce19ce

  • SHA256

    270d61d183cff3dafad0db3dbe7942374552044baea1e28411c3a143cb620c02

  • SHA512

    084217e67c125cb9952b91bc9783faf5c1e8fb01750cc1e6b4c3736c47b74dcf3207979c1c497e630e161aff529f71c403af6ca0232a7c3e9e587b58e4495589

  • SSDEEP

    24576:fG4Gnwh2IK88uyMGI1YSbmdtDxnrW1oC0AZDvDetNQT7f+5eKMUxThC35:ewh2IKAYjtNme5eeG

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\x64\SQLite.Interop.dll,#1
    1⤵
      PID:2108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads