Overview
overview
10Static
static
7MEIPreload...rs.dll
windows10-2004-x64
7MEIPreload...el.dll
windows10-2004-x64
1MEIPreload/icudt.dll
windows7-x64
1MEIPreload/icudt.dll
windows10-2004-x64
1MasterKey_....6.exe
windows7-x64
10MasterKey_....6.exe
windows10-2004-x64
10swiftshade...me.dll
windows7-x64
5swiftshade...me.dll
windows10-2004-x64
5swiftshade...lf.dll
windows7-x64
1swiftshade...lf.dll
windows10-2004-x64
1swiftshade...er.dll
windows10-2004-x64
1swiftshade...GL.dll
windows7-x64
1swiftshade...GL.dll
windows10-2004-x64
1swiftshade...v2.dll
windows7-x64
1swiftshade...v2.dll
windows10-2004-x64
1swiftshade...re.dll
windows7-x64
1swiftshade...re.dll
windows10-2004-x64
1swiftshade...er.dll
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28/01/2025, 19:12
Static task
static1
Behavioral task
behavioral1
Sample
MEIPreload/CPFilters.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
MEIPreload/CredProvDataModel.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
MEIPreload/icudt.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
MEIPreload/icudt.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
MasterKey_Pro_v2.6.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
MasterKey_Pro_v2.6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
swiftshader/chrome.dll
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
swiftshader/chrome.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
swiftshader/chrome_elf.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
swiftshader/chrome_elf.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
swiftshader/eventlog_provider.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
swiftshader/libEGL.dll
Resource
win7-20241010-en
Behavioral task
behavioral13
Sample
swiftshader/libEGL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
swiftshader/libGLESv2.dll
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
swiftshader/libGLESv2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
swiftshader/mojo_core.dll
Resource
win7-20241010-en
Behavioral task
behavioral17
Sample
swiftshader/mojo_core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
swiftshader/vk_swiftshader.dll
Resource
win10v2004-20241007-en
General
-
Target
swiftshader/chrome.dll
-
Size
159.9MB
-
MD5
15f177ea56f074638a0c271d0695cf0f
-
SHA1
b9c7ee1e59711787de4f78dc764d5bac2c10922d
-
SHA256
c604619e34f1d527393f1526cee58e0bc5f3a254a962c5952e9f143dd4c9ed1c
-
SHA512
71d1b40bec51ef11f7b5a7e849ac60b0a222a49a89c51b4d4fabd110a33966991538b606decf8a2caaf595f1e527b3431dfced6d45ac3463aabc637559f3bc29
-
SSDEEP
786432:vu1y2Qbz4/annWUlKTZii+0rkwLyEW6YJ+OwjaaIZYGJgZoX92oFm1Pl5XZL0AEM:gMb0GWUkZixsbyEWV+j7LbZokTXZLz
Malware Config
Signatures
-
Drops file in System32 directory 13 IoCs
description ioc Process File opened for modification C:\Windows\system32\dll\chrome.dll.pdb rundll32.exe File opened for modification C:\Windows\system32\symbols\dll\chrome.dll.pdb rundll32.exe File opened for modification C:\Windows\system32\exe\rundll32.pdb rundll32.exe File opened for modification C:\Windows\system32\kernel32.pdb rundll32.exe File opened for modification C:\Windows\system32\DLL\kernel32.pdb rundll32.exe File opened for modification C:\Windows\system32\symbols\DLL\kernel32.pdb rundll32.exe File opened for modification C:\Windows\system32\debug.log rundll32.exe File opened for modification C:\Windows\system32\rundll32.pdb rundll32.exe File opened for modification C:\Windows\system32\symbols\exe\rundll32.pdb rundll32.exe File opened for modification C:\Windows\system32\ntdll.pdb rundll32.exe File opened for modification C:\Windows\system32\dll\ntdll.pdb rundll32.exe File opened for modification C:\Windows\system32\symbols\dll\ntdll.pdb rundll32.exe File opened for modification C:\Windows\system32\chrome.dll.pdb rundll32.exe