b51105615d31ef7388b9ffbf670133cb173d1e7a7100bfef0b93e2b6e58b9142

Submit
Reports

Overview

overview

Static

static

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...es.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ct.rtf

windows10-1703-x64

Licenses/1...rk.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ss.rtf

windows10-1703-x64

Licenses/1...R2.rtf

windows10-1703-x64

Licenses/1...DB.rtf

windows10-1703-x64

Licenses/1...LI.rtf

windows10-1703-x64

Licenses/1...ts.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...om.rtf

windows10-1703-x64

Licenses/1...er.rtf

windows10-1703-x64

Licenses/s...se.rtf

windows10-1703-x64

Licenses/s...es.rtf

windows10-1703-x64

Setup.exe

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...ge.exe

windows10-1703-x64

Team Tools...64.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...32.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...UI.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ol.dll

windows10-1703-x64

Team Tools...er.dll

windows10-1703-x64

Analysis

max time kernel
191s
max time network
305s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
30-06-2024 22:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

vmprotect

2 signatures

Behavioral task

behavioral1

Sample

Licenses/1049/EntityFrameworkDesignerForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

11 signatures

300 seconds

Behavioral task

behavioral2

Sample

Licenses/1049/ReportViewerAddOnForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral3

Sample

Licenses/1049/SQL08CLRtypes.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral4

Sample

Licenses/1049/SQLCmdLnUtils.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral5

Sample

Licenses/1049/SQLServerCompact.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral6

Sample

Licenses/1049/SQLServerDACFramework.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral7

Sample

Licenses/1049/SQLServerDataTools.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

Licenses/1049/SQLServerExpress.rtf

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

300 seconds

Behavioral task

behavioral9

Sample

Licenses/1049/SQLServerExpress2008R2.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

Licenses/1049/SQLServerLocalDB.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral11

Sample

Licenses/1049/SQLServerNativeCLI.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral12

Sample

Licenses/1049/SQLServerSharedManagementObjects.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral13

Sample

Licenses/1049/SQLServerTSQLCompilerservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral14

Sample

Licenses/1049/SQLServerTSQLlanguageservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral15

Sample

Licenses/1049/SQLServerTransact-SQLScriptDom.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral16

Sample

Licenses/1049/SysClrTypes_SQLServer.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral17

Sample

Licenses/sdk_license.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral18

Sample

Licenses/sdk_third_party_notices.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral19

Sample

Setup.exe

Resource

win10-20240404-en

stealc vidar discovery spyware stealer themida vmprotect

windows10-1703-x64

21 signatures

300 seconds

Behavioral task

behavioral20

Sample

Team Tools/Dynamic Code Coverage Tools/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/CodeCoverage.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/covrun64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/msdia110.dll

Resource

win10-20240404-en

persistence privilege_escalation

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

Team Tools/Dynamic Code Coverage Tools/covrun32.dll

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

Team Tools/Dynamic Code Coverage Tools/msdia110.dll

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral26

Sample

Team Tools/Dynamic Code Coverage Tools/ru/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

Team Tools/Performance Tools/1049/TSDevPkgUI.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

Team Tools/Performance Tools/1049/perfpkgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

Team Tools/Performance Tools/1049/vsinstrui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

Team Tools/Performance Tools/1049/vspmsgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

Team Tools/Performance Tools/KernelTraceControl.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

Team Tools/Performance Tools/Microsoft.VisualStudio.Enterprise.AspNetHelper.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

Team Tools/Performance Tools/KernelTraceControl.dll
Size

180KB
MD5

7609229e1a8adcac0aa6cfb6db618f87
SHA1

601ab37c5d0d7946b83d86f7b7e20617a41af63b
SHA256

31d7dad4b7ec122d0ca50b6e4c97ad47ae64b093a6d63ce2ea92f5467e099226
SHA512

1466f652a8ddccdac97893364466a95d5f81715302f7d567740d500bdbe433deb688803c6daa05fe04f0c42c0cc0e3497ae0a642642fcdc97eec033537c3c3e7
SSDEEP

3072:lJTIa03rCNOLYNc1bxfYLZW6epRIMBVDPETDi1vxlw2vmi9o:l2eNOLYq1bAZWNLJsgjvmi9o

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Team Tools\Performance Tools\KernelTraceControl.dll",#1
1⤵
PID:1048

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads