Resubmissions
06/04/2025, 17:05
250406-vmarsstybt 1004/04/2025, 13:35
250404-qvrcasznx3 1004/04/2025, 01:29
250404-bwktkszmw4 10Analysis
-
max time kernel
432s -
max time network
434s -
platform
windows11-21h2_x64 -
resource
win11-20250313-en -
resource tags
arch:x64arch:x86image:win11-20250313-enlocale:en-usos:windows11-21h2-x64system -
submitted
06/04/2025, 17:05
Behavioral task
behavioral1
Sample
Dragonforce.zip
Resource
win11-20250313-en
Behavioral task
behavioral2
Sample
1250ba6f25fd60077f698a2617c15f89d58c1867339bfd9ee8ab19ce9943304b.exe
Resource
win11-20250313-en
Behavioral task
behavioral3
Sample
__MACOSX/._1250ba6f25fd60077f698a2617c15f89d58c1867339bfd9ee8ab19ce9943304b.exe
Resource
win11-20250313-en
General
-
Target
Dragonforce.zip
-
Size
94KB
-
MD5
7e7b8b35317b1bbf57cd5b39c310da4c
-
SHA1
3966077d545454f8054be4dbdfce646a740b911f
-
SHA256
8656c8bc2d098776803ef6648d5b4d9e4cc444647ac09bb97fcccd54956ddc94
-
SHA512
3288d141c1a25acc3af3e3b38ef67e2d61db55c85ddc7adebed3d41eb30603ea0b5a3d10bed75b491b9c37b94ee3168dd6b95c843c06e392c559144bee9a74b2
-
SSDEEP
1536:+LK9RGjrGYNgNHOagSR/twp48BGn7L/I1RpeavTkH88m/Y+YEROahglRPN7QXN60:LGHTgNugtwG8YnYjpXTN8m/Y+gqWRl8F
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Dragonforce.zip1⤵PID:1284
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:752