top title background image
flash

2qTIaOLW2o.dll

Status: finished
Submission Time: 2021-09-28 22:07:18 +02:00
Malicious
Trojan
Evader
Dridex

Comments

Tags

  • Dridex
  • exe

Details

  • Analysis ID:
    492663
  • API (Web) ID:
    860232
  • Analysis Started:
    2021-09-28 22:15:13 +02:00
  • Analysis Finished:
    2021-09-28 22:30:51 +02:00
  • MD5:
    8ad564b939e5a713e39154c7e566adc6
  • SHA1:
    8cd069a890ab232fca75a17e324de60c426f3115
  • SHA256:
    1fa221f1d5a2c006943c6986babc756890b79c2b38380403789e54f467e1a84c
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 46/68
malicious
Score: 34/45
malicious

URLs

Name Detection
https://mixer.com/api/v1/chats/%.0fhttps://mixer.com/api/v1/users/currentBEAM_IMAGEGamesGuide::BeamC
https://MediaData.XboxLive.com/broadcasts/Augmenthttps://MediaData.XboxLive.com/screenshots/Augmenth
https://aka.ms/wk9ocd
Click to see the 7 hidden entries
http://schemas.micro
https://www.xboxlive.comMBI_SSLhttps://profile.xboxlive.com/users/me/profile/settings?settings=GameD
https://mixer.com/_latest/assets/emoticons/%ls.pngtitleIdaumIdkglIdprocessNamenametypeIdmultimedia
https://mixer.com/api/v1/broadcasts/current
https://aka.ms/w5ryqnhttps://aka.ms/imfx4kQUITTING
https://mixer.com/%wsWindows.System.Launcher
https://mixer.com/api/v1/types/lookup%wshttps://mixer.com/api/v1/channels/%wshttps://mixer.com/api/v

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\52smNq1W\SLC.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\CsJaRZ\HID.DLL
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\CsJaRZ\tabcal.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
Click to see the 18 hidden entries
C:\Users\user\AppData\Local\N52IORg\WTSAPI32.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\ScS40sYu\dwmapi.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\cAlXLQGkN\SndVol.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\cAlXLQGkN\UxTheme.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\famGrLP\DUI70.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\hbyq\SYSDM.CPL
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\89dad5d484a9f889a3a8dfca823edc3e_d06ed635-68f6-4e9a-955c-4899f5f57b9a
data
#
C:\Users\user\AppData\Local\y7FgRNmA\dpapimig.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\y7FgRNmA\DUI70.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\xOu8\dwmapi.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\xOu8\LockScreenContentServer.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\rPj\ProximityUxHost.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\rPj\DUI70.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\hbyq\SystemPropertiesPerformance.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\famGrLP\dpapimig.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\ScS40sYu\GamePanel.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\N52IORg\rdpinit.exe
PE32+ executable (GUI) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\52smNq1W\msinfo32.exe
PE32+ executable (GUI) x86-64, for MS Windows
#