Overview
overview
10Static
static
4LarvaLabsW...er.exe
windows7_x64
10LarvaLabsW...er.exe
windows10_x64
10ROGAIOSDK.dll
windows7_x64
3ROGAIOSDK.dll
windows10_x64
3RofPaketsoka.dll
windows7_x64
1RofPaketsoka.dll
windows10_x64
3ssleay32.dll
windows7_x64
1ssleay32.dll
windows10_x64
1storarc.dll
windows7_x64
1storarc.dll
windows10_x64
1storelib.dll
windows7_x64
1storelib.dll
windows10_x64
3storelibir-2.dll
windows7_x64
1storelibir-2.dll
windows10_x64
3Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
16-12-2021 16:12
Behavioral task
behavioral1
Sample
LarvaLabsWallet Launcher.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
LarvaLabsWallet Launcher.exe
Resource
win10-en-20211208
Behavioral task
behavioral3
Sample
ROGAIOSDK.dll
Resource
win7-en-20211208
Behavioral task
behavioral4
Sample
ROGAIOSDK.dll
Resource
win10-en-20211208
Behavioral task
behavioral5
Sample
RofPaketsoka.dll
Resource
win7-en-20211208
Behavioral task
behavioral6
Sample
RofPaketsoka.dll
Resource
win10-en-20211208
Behavioral task
behavioral7
Sample
ssleay32.dll
Resource
win7-en-20211208
Behavioral task
behavioral8
Sample
ssleay32.dll
Resource
win10-en-20211208
Behavioral task
behavioral9
Sample
storarc.dll
Resource
win7-en-20211208
Behavioral task
behavioral10
Sample
storarc.dll
Resource
win10-en-20211208
Behavioral task
behavioral11
Sample
storelib.dll
Resource
win7-en-20211208
Behavioral task
behavioral12
Sample
storelib.dll
Resource
win10-en-20211208
Behavioral task
behavioral13
Sample
storelibir-2.dll
Resource
win7-en-20211208
Behavioral task
behavioral14
Sample
storelibir-2.dll
Resource
win10-en-20211208
General
-
Target
storarc.dll
-
Size
1.2MB
-
MD5
7ee1cd11cb173f645193daca84fed75f
-
SHA1
8b9e1c436edd73484bd72928291673f12ee35a8e
-
SHA256
e454c80f160ba96b276308b27aae8c63b5540a06032ed7b6c981034722597ba7
-
SHA512
6ddd5a76d80907cbb8db778f7aad6621c3d81529c7c054e6e154d3adb8cb65b0a9350d3d1e6f6dffc7e07086a9cc9c69a0d360fc10743f0cfd4a875ad6642e8d
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 1536 wrote to memory of 1656 1536 rundll32.exe rundll32.exe PID 1536 wrote to memory of 1656 1536 rundll32.exe rundll32.exe PID 1536 wrote to memory of 1656 1536 rundll32.exe rundll32.exe PID 1536 wrote to memory of 1656 1536 rundll32.exe rundll32.exe PID 1536 wrote to memory of 1656 1536 rundll32.exe rundll32.exe PID 1536 wrote to memory of 1656 1536 rundll32.exe rundll32.exe PID 1536 wrote to memory of 1656 1536 rundll32.exe rundll32.exe