b51105615d31ef7388b9ffbf670133cb173d1e7a7100bfef0b93e2b6e58b9142

Submit
Reports

Overview

overview

Static

static

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...es.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ct.rtf

windows10-1703-x64

Licenses/1...rk.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ss.rtf

windows10-1703-x64

Licenses/1...R2.rtf

windows10-1703-x64

Licenses/1...DB.rtf

windows10-1703-x64

Licenses/1...LI.rtf

windows10-1703-x64

Licenses/1...ts.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...om.rtf

windows10-1703-x64

Licenses/1...er.rtf

windows10-1703-x64

Licenses/s...se.rtf

windows10-1703-x64

Licenses/s...es.rtf

windows10-1703-x64

Setup.exe

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...ge.exe

windows10-1703-x64

Team Tools...64.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...32.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...UI.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ol.dll

windows10-1703-x64

Team Tools...er.dll

windows10-1703-x64

Analysis

max time kernel
191s
max time network
307s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
30-06-2024 22:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

vmprotect

2 signatures

Behavioral task

behavioral1

Sample

Licenses/1049/EntityFrameworkDesignerForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

11 signatures

300 seconds

Behavioral task

behavioral2

Sample

Licenses/1049/ReportViewerAddOnForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral3

Sample

Licenses/1049/SQL08CLRtypes.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral4

Sample

Licenses/1049/SQLCmdLnUtils.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral5

Sample

Licenses/1049/SQLServerCompact.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral6

Sample

Licenses/1049/SQLServerDACFramework.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral7

Sample

Licenses/1049/SQLServerDataTools.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

Licenses/1049/SQLServerExpress.rtf

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

300 seconds

Behavioral task

behavioral9

Sample

Licenses/1049/SQLServerExpress2008R2.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

Licenses/1049/SQLServerLocalDB.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral11

Sample

Licenses/1049/SQLServerNativeCLI.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral12

Sample

Licenses/1049/SQLServerSharedManagementObjects.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral13

Sample

Licenses/1049/SQLServerTSQLCompilerservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral14

Sample

Licenses/1049/SQLServerTSQLlanguageservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral15

Sample

Licenses/1049/SQLServerTransact-SQLScriptDom.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral16

Sample

Licenses/1049/SysClrTypes_SQLServer.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral17

Sample

Licenses/sdk_license.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral18

Sample

Licenses/sdk_third_party_notices.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral19

Sample

Setup.exe

Resource

win10-20240404-en

stealc vidar discovery spyware stealer themida vmprotect

windows10-1703-x64

21 signatures

300 seconds

Behavioral task

behavioral20

Sample

Team Tools/Dynamic Code Coverage Tools/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/CodeCoverage.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/covrun64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/msdia110.dll

Resource

win10-20240404-en

persistence privilege_escalation

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

Team Tools/Dynamic Code Coverage Tools/covrun32.dll

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

Team Tools/Dynamic Code Coverage Tools/msdia110.dll

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral26

Sample

Team Tools/Dynamic Code Coverage Tools/ru/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

Team Tools/Performance Tools/1049/TSDevPkgUI.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

Team Tools/Performance Tools/1049/perfpkgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

Team Tools/Performance Tools/1049/vsinstrui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

Team Tools/Performance Tools/1049/vspmsgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

Team Tools/Performance Tools/KernelTraceControl.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

Team Tools/Performance Tools/Microsoft.VisualStudio.Enterprise.AspNetHelper.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

Team Tools/Performance Tools/1049/TSDevPkgUI.dll
Size

28KB
MD5

14f531bbf1dfc33cbb76f3e2329a315f
SHA1

10249cc0d999f87f861a5fa024b3c861237357f3
SHA256

1fdd495b1d08858982479fa87f8a3bebab780849886b9902637684ac1e1af002
SHA512

56e6de7aa132f98824731f9ca36b661d1ba73348ee8238795496ddd629cdc7f8c7eb63cf49e5ece88b11810269dd5bba928f1e4ef5ce53bc5735018355edcf0f
SSDEEP

384:Nm1mXWv1k440GftpBjy9BFtAHRN7J8PlEB0/5:NmYIDipJhe5

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Team Tools\Performance Tools\1049\TSDevPkgUI.dll",#1
1⤵
PID:3956

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads