0be35975a9936bc239c69fb4c6e123f1b9f8b20c469d7fc38c62ae41fbde017b | Triage

Submit
Reports

Overview

overview

Static

static

3

InvoiceFB1.exe

windows7-x64

InvoiceFB1.exe

windows10-2004-x64

$APPDATA/b...60.dll

windows7-x64

1

$APPDATA/b...60.dll

windows10-2004-x64

1

$APPDATA/b...HS.dll

windows7-x64

1

$APPDATA/b...HS.dll

windows10-2004-x64

1

$APPDATA/b...ui.dll

windows7-x64

1

$APPDATA/b...ui.dll

windows10-2004-x64

1

$APPDATA/b...on.dll

windows7-x64

3

$APPDATA/b...on.dll

windows10-2004-x64

3

$APPDATA/b...hm.exe

windows7-x64

$APPDATA/b...hm.exe

windows10-2004-x64

$APPDATA/c...60.dll

windows7-x64

1

$APPDATA/c...60.dll

windows10-2004-x64

1

$APPDATA/c...60.dll

windows7-x64

1

$APPDATA/c...60.dll

windows10-2004-x64

1

$APPDATA/c...wp.exe

windows7-x64

1

$APPDATA/c...wp.exe

windows10-2004-x64

3

$APPDATA/c...un.exe

windows7-x64

3

$APPDATA/c...un.exe

windows10-2004-x64

3

$APPDATA/c...rc.dll

windows7-x64

1

$APPDATA/c...rc.dll

windows10-2004-x64

1

$APPDATA/c...ll.dll

windows7-x64

3

$APPDATA/c...ll.dll

windows10-2004-x64

3

$APPDATA/c...UI.dll

windows7-x64

1

$APPDATA/c...UI.dll

windows10-2004-x64

1

$APPDATA/c...ps.dll

windows7-x64

3

$APPDATA/c...ps.dll

windows10-2004-x64

3

$APPDATA/c...00.dll

windows7-x64

3

$APPDATA/c...00.dll

windows10-2004-x64

3

$APPDATA/c...ui.dll

windows7-x64

1

$APPDATA/c...ui.dll

windows10-2004-x64

1

Analysis

max time kernel
93s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2024 18:26

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

InvoiceFB1.exe

Resource

win7-20240903-en

formbook pw9 discovery rat spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

InvoiceFB1.exe

Resource

win10v2004-20241007-en

formbook pw9 discovery persistence rat spyware stealer trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral3

Sample

$APPDATA/black/11.opends60.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

$APPDATA/black/11.opends60.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

$APPDATA/black/MFC80CHS.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

$APPDATA/black/MFC80CHS.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

$APPDATA/black/bscmakeui.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

$APPDATA/black/bscmakeui.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

$APPDATA/black/fusion.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$APPDATA/black/fusion.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$APPDATA/black/makehm.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

$APPDATA/black/makehm.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

$APPDATA/carts/23.opends60.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

$APPDATA/carts/23.opends60.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

$APPDATA/carts/54.opends60.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

$APPDATA/carts/54.opends60.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

$APPDATA/carts/aspnetwp.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

$APPDATA/carts/aspnetwp.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

$APPDATA/carts/autorun.exe

Resource

win7-20241023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

$APPDATA/carts/autorun.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

$APPDATA/carts/msdatasrc.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

$APPDATA/carts/msdatasrc.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

$APPDATA/carts/sbssystemconfigurationinstall.dll

Resource

win7-20241010-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

$APPDATA/carts/sbssystemconfigurationinstall.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

$APPDATA/carts/sqlleUI.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

$APPDATA/carts/sqlleUI.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

$APPDATA/carts/tcprops.dll

Resource

win7-20241023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

$APPDATA/carts/tcprops.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

$APPDATA/carts/u2l2000.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

$APPDATA/carts/u2l2000.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

$APPDATA/carts/vcbuildui.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

$APPDATA/carts/vcbuildui.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

$APPDATA/carts/vcbuildui.dll
Size

14KB
MD5

30e455126205adb295b6e27662afd489
SHA1

16a9a82a303d9cc89c5498fa757ce532d7d092c4
SHA256

6794f7c3fd53137f8bc0d937fbc91249f4e0a714239923f18ee01b3e22b5c8cc
SHA512

4d2072b6ab5b9cd2b1234525cc1bbe1638868588a9e7f6e39ec14d390843097845146888aebecbe57ef9014f0c5a28a68114568dfb9fc226aef0b1b9ed01c915
SSDEEP

192:NRXZWEHTBGWNrYcCd0T84lgdeTR9Fy/P60JH5FbMFvtu9GHSu3dw:DXZWOgWDg7tW3

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$APPDATA\carts\vcbuildui.dll,#1
1⤵
PID:4440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy