cb6e5498783057d293cdd184505d725b2c0e9ffabaafd9faebc4d156c36533b8 | Triage

Submit
Reports

Overview

overview

Static

static

pass is 1/...ng.dll

windows7-x64

1

pass is 1/...ng.dll

windows10-2004-x64

1

pass is 1/...re.dll

windows7-x64

1

pass is 1/...re.dll

windows10-2004-x64

1

pass is 1/...ms.dll

windows7-x64

1

pass is 1/...ms.dll

windows10-2004-x64

1

pass is 1/...pf.dll

windows7-x64

1

pass is 1/...pf.dll

windows10-2004-x64

1

pass is 1/UI.dll

windows7-x64

5

pass is 1/UI.dll

windows10-2004-x64

7

pass is 1/awp 2.exe

windows7-x64

1

pass is 1/awp 2.exe

windows10-2004-x64

1

pass is 1/...t).exe

windows7-x64

pass is 1/...t).exe

windows10-2004-x64

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
28-12-2024 20:26

Sharing

Static task

static1

themida awp quasar

4 signatures

Behavioral task

behavioral1

Sample

pass is 1/Microsoft.Extensions.FileSystemGlobbing.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

pass is 1/Microsoft.Extensions.FileSystemGlobbing.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

pass is 1/Microsoft.Web.WebView2.Core.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

pass is 1/Microsoft.Web.WebView2.Core.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

pass is 1/Microsoft.Web.WebView2.WinForms.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

pass is 1/Microsoft.Web.WebView2.WinForms.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

pass is 1/Microsoft.Web.WebView2.Wpf.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

pass is 1/Microsoft.Web.WebView2.Wpf.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

pass is 1/UI.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

pass is 1/UI.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

pass is 1/awp 2.exe

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

pass is 1/awp 2.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

pass is 1/driver (run to map it).exe

Resource

win7-20240903-en

quasar awp spyware trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral14

Sample

pass is 1/driver (run to map it).exe

Resource

win10v2004-20241007-en

quasar awp spyware trojan

windows10-2004-x64

12 signatures

150 seconds

Report Analysis Logs

General

Target

pass is 1/awp 2.exe
Size

154KB
MD5

f585a065579d8fac23be46e6d56d71cf
SHA1

058b15052f71414c21ab6725aca6d363f0bb03e7
SHA256

d55dd383de4fdd0bbe76f87940c528e8e03dc96ee0f4aba47aab86f3658098d8
SHA512

685bcfe7caa966bb14761519a83018b42932ce750a80229521ce8bb22572d7b137a05f51491816ebd307a4e557bcb51498f3369fca2618a8c86caf930d2136b2
SSDEEP

3072:6iS4omp03WQthI/9S3BZi08iRQ1G78IVn2sbS7cJ68ltjfl:6iS4ompB9S3BZi0a1G78IVAcUctD

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\pass is 1\awp 2.exe
"C:\Users\Admin\AppData\Local\Temp\pass is 1\awp 2.exe"
1⤵
PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy