Overview

overview

10

Static

static

10

Builder Wo...��.exe

windows7-x64

10

Builder Wo...��.exe

windows10-2004-x64

10

DefenderRemover.exe

windows7-x64

3

DefenderRemover.exe

windows10-2004-x64

3

DefenderRemover.exe

windows7-x64

3

DefenderRemover.exe

windows10-2004-x64

3

DotNetZip.dll

windows7-x64

1

DotNetZip.dll

windows10-2004-x64

1

Extreme.Net.dll

windows7-x64

1

Extreme.Net.dll

windows10-2004-x64

1

MetroFrame...gn.dll

windows7-x64

1

MetroFrame...gn.dll

windows10-2004-x64

1

MetroFrame...ts.dll

windows7-x64

1

MetroFrame...ts.dll

windows10-2004-x64

1

MetroFramework.dll

windows7-x64

1

MetroFramework.dll

windows10-2004-x64

1

Mono.Cecil.dll

windows7-x64

1

Mono.Cecil.dll

windows10-2004-x64

1

stub.exe

windows7-x64

10

stub.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-01-2025 18:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    DotNetZip.dll

  • Size

    448KB

  • MD5

    6d1c62ec1c2ef722f49b2d8dd4a4df16

  • SHA1

    1bb08a979b7987bc7736a8cfa4779383cb0ecfa6

  • SHA256

    00da1597d92235d3f84da979e2fa5dbf049bafb52c33bd6fc8ee7b29570c124c

  • SHA512

    c0dce8eaa52eb6c319d4be2eec4622bb3380c65b659cfb77ff51a4ada7d3e591e791ee823dad67b5556ffac5c060ff45d09dd1cc21baaf70ba89806647cb3bd2

  • SSDEEP

    6144:FuCIjOL8qwWN/jMlC/XiapWSu9vnITVxGtSV41kJDsTDD5rlGe6wfxLV/7:dZLJLdvOSsnjS4csBrge6sf7

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\DotNetZip.dll,#1
    1⤵
      PID:4808

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads