7e69827061badbc60857da82492217ba76ed14d71711d4587ce44b9545081976 | Triage

Submit
Reports

Overview

overview

Static

static

3

__x64___se...ep.dll

windows10-2004-x64

1

__x64___se...fm.dll

windows10-2004-x64

1

__x64___se...sh.dll

windows10-2004-x64

1

__x64___se...is.dll

windows10-2004-x64

1

__x64___se...is.dll

windows10-2004-x64

1

__x64___se...er.dll

windows10-2004-x64

1

__x64___se...it.dll

windows10-2004-x64

1

__x64___se...ui.dll

windows10-2004-x64

1

__x64___se...el.dll

windows10-2004-x64

1

__x64___se...nd.dll

windows10-2004-x64

1

__x64___se...eg.dll

windows10-2004-x64

1

__x64___se...vc.dll

windows10-2004-x64

1

__x64___se...ip.dll

windows10-2004-x64

8

__x64___se...or.dll

windows10-2004-x64

1

__x64___se...um.dll

windows10-2004-x64

1

__x64___se...ui.dll

windows10-2004-x64

1

__x64___se...up.msi

windows7-x64

6

__x64___se...up.msi

windows10-2004-x64

__x64___se...PS.dll

windows10-2004-x64

1

__x64___se...pi.dll

windows10-2004-x64

1

__x64___se...vc.dll

windows10-2004-x64

1

__x64___se...ge.dll

windows10-2004-x64

1

Analysis

max time kernel
146s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-06-2024 01:15

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

__x64___setup___x32__/TapiSysprep/TapiSysprep.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

__x64___setup___x32__/TapiSysprep/netprofm.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

__x64___setup___x32__/TapiSysprep/rpcnsh.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

__x64___setup___x32__/TapiSysprep/socialapis.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

__x64___setup___x32__/acledit/BluetoothApis.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

__x64___setup___x32__/acledit/DevDispItemProvider.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

__x64___setup___x32__/acledit/acledit.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

__x64___setup___x32__/acledit/printui.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

__x64___setup___x32__/dsreg/dcntel.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

__x64___setup___x32__/dsreg/dsound.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

__x64___setup___x32__/dsreg/dsreg.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

__x64___setup___x32__/dsreg/sensrsvc.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

__x64___setup___x32__/pcwum/AppxSip.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

__x64___setup___x32__/pcwum/asferror.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

__x64___setup___x32__/pcwum/pcwum.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

__x64___setup___x32__/pcwum/pdhui.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

__x64___setup___x32__/setup.msi

Resource

win7-20240221-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral18

Sample

__x64___setup___x32__/setup.msi

Resource

win10v2004-20240611-en

rhadamanthys execution stealer

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral19

Sample

__x64___setup___x32__/wcimage/SEMgrPS.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

__x64___setup___x32__/wcimage/SensorsApi.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

__x64___setup___x32__/wcimage/netprofmsvc.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

__x64___setup___x32__/wcimage/wcimage.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

__x64___setup___x32__/pcwum/pdhui.dll
Size

61KB
MD5

2b0e1517dbb0e067d82fe2d47c372a8e
SHA1

67a80548f78cab22cf81b93f3181d689c44b26e3
SHA256

6cb757959ab8200999ae91a0ccab15967fa1ed101c90de195e26397b6ef6c070
SHA512

576b9b8d47736939ca99adbb831758addc55e85d875f5ddfd8a5e633f58f5786b00a020f0017582e3545f110a6b730d1025685cfeec024aa837efe8f8caf48c5
SSDEEP

1536:7rLxh5fUGpp05BqxFGRqg8qAAjGJIBF+qU2:7r7pUGp058xNN4jGJIBF+qz

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\__x64___setup___x32__\pcwum\pdhui.dll,#1
1⤵
PID:2428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy