b51105615d31ef7388b9ffbf670133cb173d1e7a7100bfef0b93e2b6e58b9142

Submit
Reports

Overview

overview

Static

static

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...es.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ct.rtf

windows10-1703-x64

Licenses/1...rk.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ss.rtf

windows10-1703-x64

Licenses/1...R2.rtf

windows10-1703-x64

Licenses/1...DB.rtf

windows10-1703-x64

Licenses/1...LI.rtf

windows10-1703-x64

Licenses/1...ts.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...om.rtf

windows10-1703-x64

Licenses/1...er.rtf

windows10-1703-x64

Licenses/s...se.rtf

windows10-1703-x64

Licenses/s...es.rtf

windows10-1703-x64

Setup.exe

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...ge.exe

windows10-1703-x64

Team Tools...64.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...32.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...UI.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ol.dll

windows10-1703-x64

Team Tools...er.dll

windows10-1703-x64

Analysis

max time kernel
194s
max time network
306s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
30-06-2024 22:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

vmprotect

2 signatures

Behavioral task

behavioral1

Sample

Licenses/1049/EntityFrameworkDesignerForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

11 signatures

300 seconds

Behavioral task

behavioral2

Sample

Licenses/1049/ReportViewerAddOnForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral3

Sample

Licenses/1049/SQL08CLRtypes.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral4

Sample

Licenses/1049/SQLCmdLnUtils.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral5

Sample

Licenses/1049/SQLServerCompact.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral6

Sample

Licenses/1049/SQLServerDACFramework.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral7

Sample

Licenses/1049/SQLServerDataTools.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

Licenses/1049/SQLServerExpress.rtf

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

300 seconds

Behavioral task

behavioral9

Sample

Licenses/1049/SQLServerExpress2008R2.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

Licenses/1049/SQLServerLocalDB.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral11

Sample

Licenses/1049/SQLServerNativeCLI.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral12

Sample

Licenses/1049/SQLServerSharedManagementObjects.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral13

Sample

Licenses/1049/SQLServerTSQLCompilerservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral14

Sample

Licenses/1049/SQLServerTSQLlanguageservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral15

Sample

Licenses/1049/SQLServerTransact-SQLScriptDom.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral16

Sample

Licenses/1049/SysClrTypes_SQLServer.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral17

Sample

Licenses/sdk_license.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral18

Sample

Licenses/sdk_third_party_notices.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral19

Sample

Setup.exe

Resource

win10-20240404-en

stealc vidar discovery spyware stealer themida vmprotect

windows10-1703-x64

21 signatures

300 seconds

Behavioral task

behavioral20

Sample

Team Tools/Dynamic Code Coverage Tools/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/CodeCoverage.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/covrun64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/msdia110.dll

Resource

win10-20240404-en

persistence privilege_escalation

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

Team Tools/Dynamic Code Coverage Tools/covrun32.dll

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

Team Tools/Dynamic Code Coverage Tools/msdia110.dll

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral26

Sample

Team Tools/Dynamic Code Coverage Tools/ru/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

Team Tools/Performance Tools/1049/TSDevPkgUI.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

Team Tools/Performance Tools/1049/perfpkgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

Team Tools/Performance Tools/1049/vsinstrui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

Team Tools/Performance Tools/1049/vspmsgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

Team Tools/Performance Tools/KernelTraceControl.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

Team Tools/Performance Tools/Microsoft.VisualStudio.Enterprise.AspNetHelper.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

Team Tools/Performance Tools/1049/vsinstrui.dll
Size

69KB
MD5

42c2d411ec34cbb32ee1140228187c81
SHA1

39269a066b83c5eebb4428375ef16d5850209e24
SHA256

9c5d2602ce9947dbb0aad2a2e878a72938b2e701b26d5542621121f028c96e68
SHA512

4bef11c45a6c7d28b0294cbe46f00884401c46206e17b00da0b5b8c7af12ee8f3754710148ebeff390e79222782b78f6106c88c5c122c76e62db424d1574fa28
SSDEEP

768:Rde23M4R4eDn3DWFR3MG9zNc8BMr/PMvJ8B5wiQYolG7WiCkWq+:RIlb9zNbm4Cw77Pvbq+

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Team Tools\Performance Tools\1049\vsinstrui.dll",#1
1⤵
PID:1836

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads