Overview
overview
10Static
static
10setup_inst...32.exe
windows10_x64
10setup_inst...2b.exe
windows10_x64
8setup_inst...61.exe
windows10_x64
10setup_inst...f8.exe
windows10_x64
10setup_inst...34.exe
windows10_x64
10setup_inst...c2.exe
windows10_x64
10setup_inst...cb.exe
windows10_x64
10setup_inst...90.exe
windows10_x64
10setup_inst...79.exe
windows10_x64
6setup_inst...d8.exe
windows10_x64
3setup_inst...3b.exe
windows10_x64
8setup_inst...ac.exe
windows10_x64
10setup_inst...38.exe
windows10_x64
10setup_inst...b5.exe
windows10_x64
10setup_inst...b2.exe
windows10_x64
7setup_inst...rl.dll
windows10_x64
3setup_inst...pp.dll
windows10_x64
3setup_inst...-1.dll
windows10_x64
3setup_inst...-6.dll
windows10_x64
3setup_inst...-1.dll
windows10_x64
1setup_inst...ll.exe
windows10_x64
10Analysis
-
max time kernel
122s -
max time network
1564s -
submitted
01-01-1970 00:00
Behavioral task
behavioral1
Sample
setup_installer/Wed0901eb1dae126e32.exe
Resource
win10-en-20210920
Behavioral task
behavioral2
Sample
setup_installer/Wed094c47c32b.exe
Resource
win10-en-20210920
Behavioral task
behavioral3
Sample
setup_installer/Wed096a1bff61.exe
Resource
win10-en-20211014
Behavioral task
behavioral4
Sample
setup_installer/Wed0971f17486f8.exe
Resource
win10-en-20210920
Behavioral task
behavioral5
Sample
setup_installer/Wed09977fdc12334.exe
Resource
win10-en-20211014
Behavioral task
behavioral6
Sample
setup_installer/Wed09abf83d9c2.exe
Resource
win10-en-20210920
Behavioral task
behavioral7
Sample
setup_installer/Wed09b2a8bc4f16cb.exe
Resource
win10-en-20210920
Behavioral task
behavioral8
Sample
setup_installer/Wed09b3a5ca1a712d390.exe
Resource
win10-en-20211014
Behavioral task
behavioral9
Sample
setup_installer/Wed09c42cad92c20f79.exe
Resource
win10-en-20210920
Behavioral task
behavioral10
Sample
setup_installer/Wed09cfb2f9758281d8.exe
Resource
win10-en-20211014
Behavioral task
behavioral11
Sample
setup_installer/Wed09d27135e5a8b3b.exe
Resource
win10-en-20210920
Behavioral task
behavioral12
Sample
setup_installer/Wed09d8d6edfaff2ac.exe
Resource
win10-en-20211014
Behavioral task
behavioral13
Sample
setup_installer/Wed09db0d52c38.exe
Resource
win10-en-20210920
Behavioral task
behavioral14
Sample
setup_installer/Wed09e95ff6b5.exe
Resource
win10-en-20210920
Behavioral task
behavioral15
Sample
setup_installer/Wed09f257bb7877d00b2.exe
Resource
win10-en-20211014
Behavioral task
behavioral16
Sample
setup_installer/libcurl.dll
Resource
win10-en-20210920
Behavioral task
behavioral17
Sample
setup_installer/libcurlpp.dll
Resource
win10-en-20211014
Behavioral task
behavioral18
Sample
setup_installer/libgcc_s_dw2-1.dll
Resource
win10-en-20210920
Behavioral task
behavioral19
Sample
setup_installer/libstdc++-6.dll
Resource
win10-en-20211014
Behavioral task
behavioral20
Sample
setup_installer/libwinpthread-1.dll
Resource
win10-en-20210920
General
-
Target
setup_installer/libwinpthread-1.dll
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 2712 wrote to memory of 3688 2712 rundll32.exe rundll32.exe PID 2712 wrote to memory of 3688 2712 rundll32.exe rundll32.exe PID 2712 wrote to memory of 3688 2712 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\setup_installer\libwinpthread-1.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\setup_installer\libwinpthread-1.dll,#12⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3688-118-0x0000000000000000-mapping.dmp
-
memory/3688-120-0x0000000064940000-0x0000000064959000-memory.dmpFilesize
100KB
-
memory/3688-119-0x0000000064940000-0x0000000064959000-memory.dmpFilesize
100KB
-
memory/3688-121-0x0000000064940000-0x0000000064959000-memory.dmpFilesize
100KB
-
memory/3688-122-0x0000000064940000-0x0000000064959000-memory.dmpFilesize
100KB