Overview

overview

10

Static

static

3

TradingVie...op.exe

windows11-21h2-x64

10

apt/24.10....te.exe

windows11-21h2-x64

1

apt/php/Pu...nt.exe

windows11-21h2-x64

3

apt/php/Pu...en.exe

windows11-21h2-x64

3

apt/php/WinSCP.exe

windows11-21h2-x64

6

apt/php/WinSCP.exe

windows11-21h2-x64

6

apt/php/unins000.exe

windows11-21h2-x64

5

ispell/Acc...ad.exe

windows11-21h2-x64

3

ispell/Ima...es.exe

windows11-21h2-x64

4

ispell/Sou...SC.exe

windows11-21h2-x64

3

ispell/pro...st.exe

windows11-21h2-x64

1

ispell/pro...pp.exe

windows11-21h2-x64

3

ispell/pro...32.exe

windows11-21h2-x64

4

ispell/pro...ce.exe

windows11-21h2-x64

3

ispell/pro...ce.exe

windows11-21h2-x64

1

ispell/pro...ls.exe

windows11-21h2-x64

4

ispell/pro...ce.exe

windows11-21h2-x64

4

ispell/ru-...xe.dll

windows11-21h2-x64

1

ispell/wab.exe

windows11-21h2-x64

3

ispell/wabmig.exe

windows11-21h2-x64

3

Analysis

  • max time kernel
    89s
  • max time network
    96s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    29-01-2025 15:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ispell/ru-RU/ImagingDevices.exe.dll

  • Size

    3KB

  • MD5

    78c68c4cf140518730fa22d775bc51e9

  • SHA1

    9e63e11685ebdd12ce1c60cc2e2e7dd39313d2fb

  • SHA256

    ebb2fbe21cbb3a386170590a09eed5c844d57efcebc6122a75064f1b95070d53

  • SHA512

    92e7628d70fa68e4f710d00442188aa217cfecf051005609c531222d7d48633925c691e96733f78d5c413fd149860f79290d73ebc4a5f6eed54dd78516054d33

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ispell\ru-RU\ImagingDevices.exe.dll,#1
    1⤵
      PID:4416

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads