Overview
overview
10Static
static
3TapiSyspre...ep.dll
windows10-2004-x64
1TapiSyspre...fm.dll
windows10-2004-x64
1TapiSyspre...sh.dll
windows10-2004-x64
1TapiSyspre...is.dll
windows10-2004-x64
1acledit/Bl...is.dll
windows10-2004-x64
1acledit/De...er.dll
windows10-2004-x64
1acledit/acledit.dll
windows10-2004-x64
1acledit/printui.dll
windows10-2004-x64
1dsreg/dcntel.dll
windows10-2004-x64
1dsreg/dsound.dll
windows10-2004-x64
1dsreg/dsreg.dll
windows10-2004-x64
1dsreg/sensrsvc.dll
windows10-2004-x64
1pcwum/AppxSip.dll
windows10-2004-x64
8pcwum/asferror.dll
windows10-2004-x64
1pcwum/pcwum.dll
windows10-2004-x64
1pcwum/pdhui.dll
windows10-2004-x64
1setup.msi
windows7-x64
6setup.msi
windows10-2004-x64
10wcimage/SEMgrPS.dll
windows10-2004-x64
1wcimage/Se...pi.dll
windows10-2004-x64
1wcimage/ne...vc.dll
windows10-2004-x64
1wcimage/wcimage.dll
windows10-2004-x64
1Analysis
-
max time kernel
138s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
15-06-2024 06:42
Static task
static1
Behavioral task
behavioral1
Sample
TapiSysprep/TapiSysprep.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
TapiSysprep/netprofm.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
TapiSysprep/rpcnsh.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
TapiSysprep/socialapis.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
acledit/BluetoothApis.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral6
Sample
acledit/DevDispItemProvider.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
acledit/acledit.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
acledit/printui.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
dsreg/dcntel.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral10
Sample
dsreg/dsound.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
dsreg/dsreg.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
dsreg/sensrsvc.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
pcwum/AppxSip.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral14
Sample
pcwum/asferror.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
pcwum/pcwum.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral16
Sample
pcwum/pdhui.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
setup.msi
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
setup.msi
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
wcimage/SEMgrPS.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral20
Sample
wcimage/SensorsApi.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
wcimage/netprofmsvc.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral22
Sample
wcimage/wcimage.dll
Resource
win10v2004-20240508-en
General
-
Target
wcimage/SEMgrPS.dll
-
Size
40KB
-
MD5
76e12d39f82567db28b132e245d9e3ce
-
SHA1
53cbd54614b8e21e78096d32ddebf0771b359c37
-
SHA256
5edd09d2a2e2e03ac2fa7db4c7b9f4ee300c696534788dbedaf9cee617a97ab1
-
SHA512
62de3ef3caf4997e0f1b02f5805a5da757c7506dcf5e6f93ed9870b6a53858dd24f588700dc2e6cd1d524291fb0fe1968169a52c53e9253244f7ebd633b89f4a
-
SSDEEP
384:tASguFmJEqu2MZ3RDil1jt9exCUF9n10jaTANQ+1Lxdprb4Y75WRkWmmca9pa:KK9JbyFUF910GANQ+1pgYg
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\wcimage\SEMgrPS.dll,#11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4144 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:81⤵