9e25c89846782ebffd2814e14b232447b20df9105cdfbc5a662c721360f0c7cd | Triage

Submit
Reports

Overview

overview

Static

static

hmc hotmai...ip.dll

windows7-x64

1

hmc hotmai...ip.dll

windows10-2004-x64

1

hmc hotmai...ol.dll

windows7-x64

1

hmc hotmai...ol.dll

windows10-2004-x64

1

hmc hotmai...ET.dll

windows7-x64

1

hmc hotmai...ET.dll

windows10-2004-x64

3

hmc hotmai...on.dll

windows7-x64

1

hmc hotmai...on.dll

windows10-2004-x64

1

hmc hotmai...te.dll

windows7-x64

1

hmc hotmai...te.dll

windows10-2004-x64

1

hmc hotmai...on.dll

windows7-x64

3

hmc hotmai...on.dll

windows10-2004-x64

3

hmc hotmai...ds.dll

windows7-x64

1

hmc hotmai...ds.dll

windows10-2004-x64

1

hmc hotmai...il.exe

windows7-x64

hmc hotmai...il.exe

windows10-2004-x64

hmc hotmai...rp.dll

windows7-x64

1

hmc hotmai...rp.dll

windows10-2004-x64

1

hmc hotmai...op.dll

windows7-x64

1

hmc hotmai...op.dll

windows10-2004-x64

1

hmc hotmai...rp.dll

windows7-x64

3

hmc hotmai...rp.dll

windows10-2004-x64

3

hmc hotmai...op.dll

windows7-x64

3

hmc hotmai...op.dll

windows10-2004-x64

3

hmc hotmai...et.dll

windows7-x64

1

hmc hotmai...et.dll

windows10-2004-x64

1

Analysis

max time kernel
137s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
17-01-2025 20:12

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

hmc hotmail.4/H/DotNetZip.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

hmc hotmail.4/H/DotNetZip.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

hmc hotmail.4/H/HandyControl.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

hmc hotmail.4/H/HandyControl.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

hmc hotmail.4/H/MailBee.NET.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

hmc hotmail.4/H/MailBee.NET.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral7

Sample

hmc hotmail.4/H/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

hmc hotmail.4/H/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

hmc hotmail.4/H/System.Data.SQLite.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

hmc hotmail.4/H/System.Data.SQLite.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

hmc hotmail.4/H/System.Windows.Controls.Ribbon.dll

Resource

win7-20241010-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

hmc hotmail.4/H/System.Windows.Controls.Ribbon.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

hmc hotmail.4/H/ToolGood.Words.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

hmc hotmail.4/H/ToolGood.Words.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

hmc hotmail.4/H/hmc hotmail.exe

Resource

win7-20240729-en

stormkitty collection discovery spyware stealer

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral16

Sample

hmc hotmail.4/H/hmc hotmail.exe

Resource

win10v2004-20241007-en

stormkitty collection discovery spyware stealer

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral17

Sample

hmc hotmail.4/H/x64/GoSrp.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

hmc hotmail.4/H/x64/GoSrp.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

hmc hotmail.4/H/x64/SQLite.Interop.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

hmc hotmail.4/H/x64/SQLite.Interop.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

hmc hotmail.4/H/x86/GoSrp.dll

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

hmc hotmail.4/H/x86/GoSrp.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

hmc hotmail.4/H/x86/SQLite.Interop.dll

Resource

win7-20241023-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

hmc hotmail.4/H/x86/SQLite.Interop.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

hmc hotmail.4/H/xNet.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

hmc hotmail.4/H/xNet.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

hmc hotmail.4/H/x64/GoSrp.dll
Size

2.6MB
MD5

8f5f6ee061242d609bd05b48479d887a
SHA1

0005089c13ba90f2d150a6e117bf463a6e28af54
SHA256

6b7778f1c17b1a2d48970bdec81f1f1436066c662222ffa8200dee7c3fe610c2
SHA512

f4eda39b2bf9fe358cabb31e5f839e12704598505c16d6dd26550a5d1fa05775d34bc0ce6f631f4e3db95072630b60968cbe59d146055f87d197c9153dcdb1aa
SSDEEP

49152:IW/gxY8qgo2P+vrBQiDSLDBK31Al++gMrL+:cxYJgo2o5k/gEL+

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\hmc hotmail.4\H\x64\GoSrp.dll",#1
1⤵
PID:4884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4884-0-0x00000000582E0000-0x00000000585D5000-memory.dmp

Filesize
3.0MB

Download

© 2018-2025

Terms | Privacy