b51105615d31ef7388b9ffbf670133cb173d1e7a7100bfef0b93e2b6e58b9142

Submit
Reports

Overview

overview

Static

static

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...12.rtf

windows10-1703-x64

Licenses/1...es.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ct.rtf

windows10-1703-x64

Licenses/1...rk.rtf

windows10-1703-x64

Licenses/1...ls.rtf

windows10-1703-x64

Licenses/1...ss.rtf

windows10-1703-x64

Licenses/1...R2.rtf

windows10-1703-x64

Licenses/1...DB.rtf

windows10-1703-x64

Licenses/1...LI.rtf

windows10-1703-x64

Licenses/1...ts.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...ce.rtf

windows10-1703-x64

Licenses/1...om.rtf

windows10-1703-x64

Licenses/1...er.rtf

windows10-1703-x64

Licenses/s...se.rtf

windows10-1703-x64

Licenses/s...es.rtf

windows10-1703-x64

Setup.exe

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...ge.exe

windows10-1703-x64

Team Tools...64.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...32.dll

windows10-1703-x64

Team Tools...10.dll

windows10-1703-x64

Team Tools...es.dll

windows10-1703-x64

Team Tools...UI.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ui.dll

windows10-1703-x64

Team Tools...ol.dll

windows10-1703-x64

Team Tools...er.dll

windows10-1703-x64

Analysis

max time kernel
186s
max time network
259s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
30-06-2024 22:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

vmprotect

2 signatures

Behavioral task

behavioral1

Sample

Licenses/1049/EntityFrameworkDesignerForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

11 signatures

300 seconds

Behavioral task

behavioral2

Sample

Licenses/1049/ReportViewerAddOnForVisualStudio2012.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral3

Sample

Licenses/1049/SQL08CLRtypes.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral4

Sample

Licenses/1049/SQLCmdLnUtils.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral5

Sample

Licenses/1049/SQLServerCompact.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral6

Sample

Licenses/1049/SQLServerDACFramework.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral7

Sample

Licenses/1049/SQLServerDataTools.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

Licenses/1049/SQLServerExpress.rtf

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

300 seconds

Behavioral task

behavioral9

Sample

Licenses/1049/SQLServerExpress2008R2.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

Licenses/1049/SQLServerLocalDB.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral11

Sample

Licenses/1049/SQLServerNativeCLI.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral12

Sample

Licenses/1049/SQLServerSharedManagementObjects.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral13

Sample

Licenses/1049/SQLServerTSQLCompilerservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral14

Sample

Licenses/1049/SQLServerTSQLlanguageservice.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral15

Sample

Licenses/1049/SQLServerTransact-SQLScriptDom.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral16

Sample

Licenses/1049/SysClrTypes_SQLServer.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral17

Sample

Licenses/sdk_license.rtf

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

300 seconds

Behavioral task

behavioral18

Sample

Licenses/sdk_third_party_notices.rtf

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral19

Sample

Setup.exe

Resource

win10-20240404-en

stealc vidar discovery spyware stealer themida vmprotect

windows10-1703-x64

21 signatures

300 seconds

Behavioral task

behavioral20

Sample

Team Tools/Dynamic Code Coverage Tools/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/CodeCoverage.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/covrun64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

Team Tools/Dynamic Code Coverage Tools/amd64/msdia110.dll

Resource

win10-20240404-en

persistence privilege_escalation

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

Team Tools/Dynamic Code Coverage Tools/covrun32.dll

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

Team Tools/Dynamic Code Coverage Tools/msdia110.dll

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral26

Sample

Team Tools/Dynamic Code Coverage Tools/ru/CodeCoverageMessages.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

Team Tools/Performance Tools/1049/TSDevPkgUI.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

Team Tools/Performance Tools/1049/perfpkgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

Team Tools/Performance Tools/1049/vsinstrui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral30

Sample

Team Tools/Performance Tools/1049/vspmsgui.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

Team Tools/Performance Tools/KernelTraceControl.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

Team Tools/Performance Tools/Microsoft.VisualStudio.Enterprise.AspNetHelper.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

Team Tools/Performance Tools/Microsoft.VisualStudio.Enterprise.AspNetHelper.dll
Size

98KB
MD5

6e1a8946ea119aac63229ed11596701e
SHA1

7a60fb04270b2eb2877a7ff1176aad03a1895560
SHA256

b90343962ac631903f281bee58e1f350203691962a661a0fbaca2660c4dad562
SHA512

208168207ecfdacc668a8c6ec2fa437fe7a570c41f7d2ba6927ec47e180f4d186f398bdbc438b04109144c4c6b486df5a0076216150ad86b10207ae7305ca9d2
SSDEEP

1536:xJ5COh+mJKMBkDByUEIKc+BCnosoEgsF9o5YWPjmyQdbTXu9Z:XOWKMBzYXosbgU9o5YWPjmysbTe9Z

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Team Tools\Performance Tools\Microsoft.VisualStudio.Enterprise.AspNetHelper.dll",#1
1⤵
PID:1448

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads