Overview
overview
10Static
static
3__x64___se...ep.dll
windows10-2004-x64
1__x64___se...fm.dll
windows10-2004-x64
1__x64___se...sh.dll
windows10-2004-x64
1__x64___se...is.dll
windows10-2004-x64
1__x64___se...is.dll
windows10-2004-x64
1__x64___se...er.dll
windows10-2004-x64
1__x64___se...it.dll
windows10-2004-x64
1__x64___se...ui.dll
windows10-2004-x64
1__x64___se...el.dll
windows10-2004-x64
1__x64___se...nd.dll
windows10-2004-x64
1__x64___se...eg.dll
windows10-2004-x64
1__x64___se...vc.dll
windows10-2004-x64
1__x64___se...ip.dll
windows10-2004-x64
8__x64___se...or.dll
windows10-2004-x64
1__x64___se...um.dll
windows10-2004-x64
1__x64___se...ui.dll
windows10-2004-x64
1__x64___se...up.msi
windows7-x64
6__x64___se...up.msi
windows10-2004-x64
10__x64___se...PS.dll
windows10-2004-x64
1__x64___se...pi.dll
windows10-2004-x64
1__x64___se...vc.dll
windows10-2004-x64
1__x64___se...ge.dll
windows10-2004-x64
1Analysis
-
max time kernel
136s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2024 01:15
Static task
static1
Behavioral task
behavioral1
Sample
__x64___setup___x32__/TapiSysprep/TapiSysprep.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
__x64___setup___x32__/TapiSysprep/netprofm.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
__x64___setup___x32__/TapiSysprep/rpcnsh.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
__x64___setup___x32__/TapiSysprep/socialapis.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
__x64___setup___x32__/acledit/BluetoothApis.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral6
Sample
__x64___setup___x32__/acledit/DevDispItemProvider.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
__x64___setup___x32__/acledit/acledit.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
__x64___setup___x32__/acledit/printui.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
__x64___setup___x32__/dsreg/dcntel.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral10
Sample
__x64___setup___x32__/dsreg/dsound.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
__x64___setup___x32__/dsreg/dsreg.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral12
Sample
__x64___setup___x32__/dsreg/sensrsvc.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
__x64___setup___x32__/pcwum/AppxSip.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral14
Sample
__x64___setup___x32__/pcwum/asferror.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
__x64___setup___x32__/pcwum/pcwum.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral16
Sample
__x64___setup___x32__/pcwum/pdhui.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
__x64___setup___x32__/setup.msi
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
__x64___setup___x32__/setup.msi
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
__x64___setup___x32__/wcimage/SEMgrPS.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral20
Sample
__x64___setup___x32__/wcimage/SensorsApi.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
__x64___setup___x32__/wcimage/netprofmsvc.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral22
Sample
__x64___setup___x32__/wcimage/wcimage.dll
Resource
win10v2004-20240226-en
General
-
Target
__x64___setup___x32__/TapiSysprep/netprofm.dll
-
Size
225KB
-
MD5
77f52e2dd1dc997e6c533748d9f095f4
-
SHA1
39d72d89d0e88a5ff718dc318b391c258fd53509
-
SHA256
7fb531ef8583d7942efcf16d586b17e1424b548a2894ac0b6541291b38e250ce
-
SHA512
00fd5dc4a1d5d5f2bb39387cc26732fb3c370fc211887ea5df76636229c3be1d2baa46f30b732d5ea70da3e1821e4407a019437cc22bb87fac7766f2601e6b31
-
SSDEEP
3072:5pZaAxmzQ6U7RLmruZ8qBhrzZ4eXYWtQyE7D9Wr02kqvXkTtcbz0Z7:rpIzQXLCuZ8qBhCUPlXkTt4Q
Malware Config
Signatures
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\__x64___setup___x32__\TapiSysprep\netprofm.dll1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1300,i,8660989700097327804,17931739887231169645,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:81⤵