27e8a91f6006e57f8e2370fdabed117932b147d39a04df1ea7bb3572536d4fe0

Login
Reports

Overview

overview

Static

static

Вооstа...xx.exe

windows10-2004-x64

Вооstа...xx.exe

windows11-21h2-x64

Вооstа...40.dll

windows10-2004-x64

Вооstа...40.dll

windows11-21h2-x64

Вооstа..._1.dll

windows10-2004-x64

Вооstа..._1.dll

windows11-21h2-x64

Вооstа....0.dll

windows10-2004-x64

Вооstа....0.dll

windows11-21h2-x64

Вооstа....0.dll

windows10-2004-x64

Вооstа....0.dll

windows11-21h2-x64

Вооstа....0.dll

windows10-2004-x64

Вооstа....0.dll

windows11-21h2-x64

Вооstа...tl.dll

windows10-2004-x64

Вооstа...tl.dll

windows11-21h2-x64

Вооstа...ng.dll

windows10-2004-x64

Вооstа...ng.dll

windows11-21h2-x64

Вооstа...ng.dll

windows10-2004-x64

Вооstа...ng.dll

windows11-21h2-x64

Вооstа...ng.dll

windows10-2004-x64

Вооstа...ng.dll

windows11-21h2-x64

Вооstа...re.dll

windows10-2004-x64

Вооstа...re.dll

windows11-21h2-x64

Вооstа...ls.dll

windows10-2004-x64

Вооstа...ls.dll

windows11-21h2-x64

Analysis

max time kernel
149s
max time network
137s
platform
windows11-21h2_x64
resource
win11-20251015-en
resource tags

arch:x64arch:x86image:win11-20251015-enlocale:en-usos:windows11-21h2-x64system
submitted
22/11/2025, 15:50

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Вооstаррег 5.6.2-х64_Lua/BootstrapperAppxx.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

Вооstаррег 5.6.2-х64_Lua/BootstrapperAppxx.exe

Resource

win11-20250619-en

windows11-21h2-x64

16 signatures

150 seconds

92fe4a8cd8caee5611511fef4a399499 ead1cf discovery vidar spyware stealer

Behavioral task

behavioral3

Sample

Вооstаррег 5.6.2-х64_Lua/VCRUNTIME140.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Вооstаррег 5.6.2-х64_Lua/VCRUNTIME140.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Вооstаррег 5.6.2-х64_Lua/VCRUNTIME140_1.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Вооstаррег 5.6.2-х64_Lua/VCRUNTIME140_1.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Вооstаррег 5.6.2-х64_Lua/glib-2.0.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Вооstаррег 5.6.2-х64_Lua/glib-2.0.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Вооstаррег 5.6.2-х64_Lua/gmodule-2.0.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Вооstаррег 5.6.2-х64_Lua/gmodule-2.0.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Вооstаррег 5.6.2-х64_Lua/gobject-2.0.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Вооstаррег 5.6.2-х64_Lua/gobject-2.0.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Вооstаррег 5.6.2-х64_Lua/intl.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Вооstаррег 5.6.2-х64_Lua/intl.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll

Resource

win10v2004-20250619-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll

Resource

win11-20250619-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Вооstаррег 5.6.2-х64_Lua/pcre.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Вооstаррег 5.6.2-х64_Lua/pcre.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Вооstаррег 5.6.2-х64_Lua/vmtools.dll

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Вооstаррег 5.6.2-х64_Lua/vmtools.dll

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Вооstаррег 5.6.2-х64_Lua/pcre.dll
Size 402KB
Sample251122-s99tastpdm
SHA256 67332a8c1fa3a2bb449aea74cbcff3c64754fafb09c273ae51bafac91deac340
MD5 caa517b0b14ff77ba93fd1cd7d8d7d2a
SHA1 4e5122369d4e7386bb29f68d876395ea35b13273
SHA512 cc12dfb4ed69cc202d821209fc28506839f37af1d04414f4b1da9b3b5bf43a733a2c73c24d7f2be1bd8244da9eb9b570aef16129c91ea1a788de36106f9ce015
SSDEEP 6144:hcfa25CGe2eaYPo6O7lyD+cycOM6BdgWrLNfpui:/aY9O7ePy5dgWrLHui
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Вооstаррег 5.6.2-х64_Lua\pcre.dll",#1
1⤵
PID:6092

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads