2a58e9d0f41a5a043f146b079ab255d8954a8ecf0102de682cb1eceaa1424588

Login
Reports

Overview

overview

Static

static

AVEVA PROI...64.dll

windows10-2004-x64

AVEVA PROI...64.dll

windows11-21h2-x64

AVEVA PROI...on.dll

windows10-2004-x64

AVEVA PROI...on.dll

windows11-21h2-x64

AVEVA PROI...22.msi

windows10-2004-x64

AVEVA PROI...22.msi

windows11-21h2-x64

AVEVA PROI...ed.pdf

windows10-2004-x64

AVEVA PROI...ed.pdf

windows11-21h2-x64

AVEVA PROI...NU.exe

windows10-2004-x64

AVEVA PROI...NU.exe

windows11-21h2-x64

AVEVA PROI...64.exe

windows10-2004-x64

AVEVA PROI...64.exe

windows11-21h2-x64

AVEVA PROI...86.exe

windows10-2004-x64

AVEVA PROI...86.exe

windows11-21h2-x64

AVEVA PROI...86.exe

windows10-2004-x64

AVEVA PROI...86.exe

windows11-21h2-x64

AVEVA PROI...64.exe

windows10-2004-x64

AVEVA PROI...64.exe

windows11-21h2-x64

AVEVA PROI...86.exe

windows10-2004-x64

AVEVA PROI...86.exe

windows11-21h2-x64

AVEVA PROI...64.exe

windows10-2004-x64

AVEVA PROI...64.exe

windows11-21h2-x64

AVEVA PROI...86.exe

windows10-2004-x64

AVEVA PROI...86.exe

windows11-21h2-x64

AVEVA PROI...es.pdf

windows10-2004-x64

AVEVA PROI...es.pdf

windows11-21h2-x64

AVEVA PROI...up.exe

windows10-2004-x64

AVEVA PROI...up.exe

windows11-21h2-x64

AVEVA PROI...de.pdf

windows10-2004-x64

AVEVA PROI...de.pdf

windows11-21h2-x64

AVEVA PROI...EN.msi

windows10-2004-x64

AVEVA PROI...EN.msi

windows11-21h2-x64

Analysis

max time kernel
149s
max time network
162s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/05/2026, 01:35

Sharing

Copy URL Twitter E-mail

Static task

static1

6 signatures

pdf installer

Behavioral task

behavioral1

Sample

AVEVA PROII Simulation 2022 x64/Crack/PYG64.dll

Resource

win10v2004-20250619-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

AVEVA PROII Simulation 2022 x64/Crack/PYG64.dll

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

AVEVA PROII Simulation 2022 x64/Crack/version.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

AVEVA PROII Simulation 2022 x64/Crack/version.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

AVEVA PROII Simulation 2022 x64/Setup/AVEVAPROIISimulation2022.msi

Resource

win10v2004-20260130-en

windows10-2004-x64

26 signatures

150 seconds

adware defense_evasion discovery persistence privilege_escalation ransomware spyware trojan

Behavioral task

behavioral6

Sample

AVEVA PROII Simulation 2022 x64/Setup/AVEVAPROIISimulation2022.msi

Resource

win11-20260130-en

windows11-21h2-x64

25 signatures

150 seconds

adware defense_evasion discovery persistence privilege_escalation ransomware spyware trojan

Behavioral task

behavioral7

Sample

AVEVA PROII Simulation 2022 x64/Setup/Getting Started.pdf

Resource

win10v2004-20260130-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

AVEVA PROII Simulation 2022 x64/Setup/Getting Started.pdf

Resource

win11-20260130-en

windows11-21h2-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft .NET Framework 4.7.2 Setup/NDP472-KB4054530-x86-x64-AllOS-ENU.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft .NET Framework 4.7.2 Setup/NDP472-KB4054530-x86-x64-AllOS-ENU.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft..2015-2022.C++x64.Runtime/vc_redist.x64.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft..2015-2022.C++x64.Runtime/vc_redist.x64.exe

Resource

win11-20250619-en

windows11-21h2-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral13

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft..2015-2022.C++x86.Runtime/vc_redist.x86.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft..2015-2022.C++x86.Runtime/vc_redist.x86.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral15

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2008.C++.Runtime/vcredist_x86.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

11 signatures

150 seconds

discovery

Behavioral task

behavioral16

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2008.C++.Runtime/vcredist_x86.exe

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

discovery

Behavioral task

behavioral17

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2010.C++x64.Runtime/vcredist_x64.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral18

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2010.C++x64.Runtime/vcredist_x64.exe

Resource

win11-20250619-en

windows11-21h2-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral19

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2010.C++x86.Runtime/vcredist_x86.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral20

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2010.C++x86.Runtime/vcredist_x86.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral21

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2013.C++x64.Runtime/vcredist_x64.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral22

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2013.C++x64.Runtime/vcredist_x64.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2013.C++x86.Runtime/vcredist_x86.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

AVEVA PROII Simulation 2022 x64/Setup/Microsoft.2013.C++x86.Runtime/vcredist_x86.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

AVEVA PROII Simulation 2022 x64/Setup/P2_RelNotes.pdf

Resource

win10v2004-20260130-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral26

Sample

AVEVA PROII Simulation 2022 x64/Setup/P2_RelNotes.pdf

Resource

win11-20260130-en

windows11-21h2-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral27

Sample

AVEVA PROII Simulation 2022 x64/Setup/Setup.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

10 signatures

150 seconds

discovery ransomware

Behavioral task

behavioral28

Sample

AVEVA PROII Simulation 2022 x64/Setup/Setup.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

150 seconds

discovery ransomware

Behavioral task

behavioral29

Sample

AVEVA PROII Simulation 2022 x64/Setup/SilentInstallGuide.pdf

Resource

win10v2004-20260130-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral30

Sample

AVEVA PROII Simulation 2022 x64/Setup/SilentInstallGuide.pdf

Resource

win11-20260130-en

windows11-21h2-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

AVEVA PROII Simulation 2022 x64/Setup/ThirdPartySoftware/CAPE-OPEN/CAPE-OPEN.msi

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

ransomware

Behavioral task

behavioral32

Sample

AVEVA PROII Simulation 2022 x64/Setup/ThirdPartySoftware/CAPE-OPEN/CAPE-OPEN.msi

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

150 seconds

ransomware

Report Analysis Logs

General

Target
AVEVA PROII Simulation 2022 x64/Crack/PYG64.dll
Size 1.2MB
Sample260506-bzsnlag16w
SHA256 2a58e9d0f41a5a043f146b079ab255d8954a8ecf0102de682cb1eceaa1424588
MD5 e58a2e9c26b86954ce6e96a7f9e44989
SHA1 d60cbbf0a288ee66b55508e7e374f705df38f9e5
SHA512 6debeb92a97a238a8eed844d262b3027f3fd9fcd7fcfafc932e7ceff28e70fb1ad286764b37159b1a62fb5f645337e5bf32068fb926ce35512292919122e6b66
SSDEEP 24576:6YPvPiECnLGEuDSOm6MUi/C1BUfUlxabtRRcG41kphEZ5GP48iv/fHoB8VD:6Y6iBSTaTlxGty18WD8awaD
TLSH
T15245226CACB52C52E32080FAF534E4607864C989E7A552DF1ECA3F94BF8B9F25D75081
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2352	rundll32.exe
2352	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\AVEVA PROII Simulation 2022 x64\Crack\PYG64.dll",#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2352-0-0x00007FFD2E1D0000-0x00007FFD2E5E7000-memory.dmp

Download

memory/2352-2-0x00007FFD2E1D0000-0x00007FFD2E5E7000-memory.dmp

Download