Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
31-12-2024 21:50
Behavioral task
behavioral1
Sample
Multi Loader.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral2
Sample
SharpDX.XInput.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
SharpDX.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral4
Sample
Soap.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral5
Sample
XInputChecker.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
SharpDX.dll
-
Size
269KB
-
MD5
6c00b8be8fb6ff838c79c9de405db1f5
-
SHA1
faf1f8f0d2d56eb2377063906432cce29d9f1839
-
SHA256
518d45a5aaec84cb37e83ee2cf58c503ab6a25febb8c48b53316340c967e84bd
-
SHA512
e092aaa1bac82337bda113cb88a4990a9615c9cad8757af650caf1a327ada6ed83e4c6cf2b77073c028d986554b82ad16bc3e1e7a8b4466324201d8daa425ec5
-
SSDEEP
6144:jG9J7gpDfCvbW2HHWUwQ9N/+bydXB33XbEOERabANrG:jG37gpjCjrH2UldXJbkRa6
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SharpDX.dll,#11⤵PID:4624
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4104,i,11057550979060774106,2035785093901894313,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:81⤵PID:3920
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=5612,i,11057550979060774106,2035785093901894313,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:81⤵PID:5052