b51105615d31ef7388b9ffbf670133cb173d1e7a7100bfef0b93e2b6e58b9142

Submit
Reports

Overview

overview

Static

static

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...es.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ct.rtf

windows10-1703-x64

Licenses/1...rk.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ss.rtf

windows10-1703-x64

Licenses/1...R2.rtf

windows10-1703-x64

Licenses/1...DB.rtf

windows10-1703-x64

Licenses/1...LI.rtf

windows10-1703-x64

Licenses/1...ts.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...om.rtf

windows10-1703-x64

Licenses/1...er.rtf

windows10-1703-x64

Licenses/s...se.rtf

windows10-1703-x64

Licenses/s...es.rtf

windows10-1703-x64

Setup.exe

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...ge.exe

windows10-1703-x64

Team Tools...64.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...32.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...UI.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ol.dll

windows10-1703-x64

Team Tools...er.dll

windows10-1703-x64

Analysis

max time kernel
193s
max time network
301s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
30-06-2024 22:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

vmprotect

2 signatures

Behavioral task

behavioral1

Sample

Licenses/1049/EntityFrameworkDesignerForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

11 signatures

300 seconds

Behavioral task

behavioral2

Sample

Licenses/1049/ReportViewerAddOnForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral3

Sample

Licenses/1049/SQL08CLRtypes.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral4

Sample

Licenses/1049/SQLCmdLnUtils.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral5

Sample

Licenses/1049/SQLServerCompact.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral6

Sample

Licenses/1049/SQLServerDACFramework.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral7

Sample

Licenses/1049/SQLServerDataTools.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

Licenses/1049/SQLServerExpress.rtf

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

300 seconds

Behavioral task

behavioral9

Sample

Licenses/1049/SQLServerExpress2008R2.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

Licenses/1049/SQLServerLocalDB.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral11

Sample

Licenses/1049/SQLServerNativeCLI.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral12

Sample

Licenses/1049/SQLServerSharedManagementObjects.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral13

Sample

Licenses/1049/SQLServerTSQLCompilerservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral14

Sample

Licenses/1049/SQLServerTSQLlanguageservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral15

Sample

Licenses/1049/SQLServerTransact-SQLScriptDom.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral16

Sample

Licenses/1049/SysClrTypes_SQLServer.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral17

Sample

Licenses/sdk_license.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral18

Sample

Licenses/sdk_third_party_notices.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral19

Sample

Setup.exe

Resource

win10-20240404-en

stealc vidar discovery spyware stealer themida vmprotect

windows10-1703-x64

21 signatures

300 seconds

Behavioral task

behavioral20

Sample

Team Tools/Dynamic Code Coverage Tools/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/CodeCoverage.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/covrun64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/msdia110.dll

Resource

win10-20240404-en

persistence privilege_escalation

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

Team Tools/Dynamic Code Coverage Tools/covrun32.dll

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

Team Tools/Dynamic Code Coverage Tools/msdia110.dll

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral26

Sample

Team Tools/Dynamic Code Coverage Tools/ru/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

Team Tools/Performance Tools/1049/TSDevPkgUI.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

Team Tools/Performance Tools/1049/perfpkgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

Team Tools/Performance Tools/1049/vsinstrui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

Team Tools/Performance Tools/1049/vspmsgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

Team Tools/Performance Tools/KernelTraceControl.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

Team Tools/Performance Tools/Microsoft.VisualStudio.Enterprise.AspNetHelper.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

Team Tools/Dynamic Code Coverage Tools/CodeCoverageMessages.dll
Size

35KB
MD5

566dec71428a874d2443ed4bc73427e6
SHA1

2e6411c3a1d26e381bb428f2bb32e2fac9ebe4f8
SHA256

c9b0d5fcff5367c8ebcde542fd2f5660004354c904104f25d6c8f94359edaf13
SHA512

aa19c2dda8a93824f970b9e1e227e2ece57d892e510e9968b5f184923ce01e0568ef3de533facda64000a3dc4056bd2748a4e001c53754de337209211c06ac07
SSDEEP

384:pWgMWGPNAcOHm5XzjUC4lbLGkERPrSEExYRSatpdIoCTlqx491LHB0GftpBjU6Fy:twPCYiTZWi2h1H5UW

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Team Tools\Dynamic Code Coverage Tools\CodeCoverageMessages.dll",#1
1⤵
PID:4628

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads