Overview
overview
10Static
static
9Conficker ...BC.dll
windows7_x64
5Conficker ...BC.dll
windows10-2004_x64
1Conficker ...1E.dll
windows7_x64
8Conficker ...1E.dll
windows10-2004_x64
1Conficker ...A5.dll
windows7_x64
1Conficker ...A5.dll
windows10-2004_x64
1Conficker ...B6.dll
windows7_x64
5Conficker ...B6.dll
windows10-2004_x64
1Conficker ...B6.dll
windows7_x64
5Conficker ...B6.dll
windows10-2004_x64
1Conficker ...9D.dll
windows7_x64
5Conficker ...9D.dll
windows10-2004_x64
1Conficker ...65.dll
windows7_x64
5Conficker ...65.dll
windows10-2004_x64
1Conficker ...a5.dll
windows7_x64
5Conficker ...a5.dll
windows10-2004_x64
1Conficker ...sq.dll
windows7_x64
10Conficker ...sq.dll
windows10-2004_x64
10Conficker ...q4.dll
windows7_x64
10Conficker ...q4.dll
windows10-2004_x64
10Analysis
-
max time kernel
151s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
20-05-2022 05:39
Static task
static1
Behavioral task
behavioral1
Sample
Conficker binaries/1DB5476C766555C9995B25D19F97B9BC.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Conficker binaries/1DB5476C766555C9995B25D19F97B9BC.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
Conficker binaries/223D8089F8EE82F8B05266BAECAAC61E.dll
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
Conficker binaries/223D8089F8EE82F8B05266BAECAAC61E.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
Conficker binaries/BD35D4D98FCBB1EC0E090FD2C631BAA5.dll
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
Conficker binaries/BD35D4D98FCBB1EC0E090FD2C631BAA5.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
Conficker binaries/CC7EDB2E4300AC539259F3FFDE0F1AB6.dll
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
Conficker binaries/CC7EDB2E4300AC539259F3FFDE0F1AB6.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral9
Sample
Conficker binaries/CC7EDB2E4300AC539259F3FFDE0F1AB6.dll
Resource
win7-20220414-en
Behavioral task
behavioral10
Sample
Conficker binaries/CC7EDB2E4300AC539259F3FFDE0F1AB6.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral11
Sample
Conficker binaries/CE18A72735FEB7A315B947DC0986009D.dll
Resource
win7-20220414-en
Behavioral task
behavioral12
Sample
Conficker binaries/CE18A72735FEB7A315B947DC0986009D.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral13
Sample
Conficker binaries/D9CB288F317124A0E63E3405ED290765.dll
Resource
win7-20220414-en
Behavioral task
behavioral14
Sample
Conficker binaries/D9CB288F317124A0E63E3405ED290765.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral15
Sample
Conficker binaries/bd35d4d98fcbb1ec0e090fd2c631baa5.dll
Resource
win7-20220414-en
Behavioral task
behavioral16
Sample
Conficker binaries/bd35d4d98fcbb1ec0e090fd2c631baa5.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral17
Sample
Conficker binaries/jwgkvsq.dll
Resource
win7-20220414-en
Behavioral task
behavioral18
Sample
Conficker binaries/jwgkvsq.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral19
Sample
Conficker binaries/jwgkvsq4.dll
Resource
win7-20220414-en
Behavioral task
behavioral20
Sample
Conficker binaries/jwgkvsq4.dll
Resource
win10v2004-20220414-en
General
-
Target
Conficker binaries/223D8089F8EE82F8B05266BAECAAC61E.dll
-
Size
56KB
-
MD5
223d8089f8ee82f8b05266baecaac61e
-
SHA1
6ede5f34e8717b470de10e56c99adc7c47307842
-
SHA256
a3617214a291590239cc686f97ef76841215ab0fd70bf35696e70b8f696a78de
-
SHA512
48accb32d1bd0f3c43f34518aa6872c3800449589573cc32719a2a0bd9fd4ae7ab07f964f9687eef9480c88e71bbb60c7d24b94a90ababb35df05a993b55eb58
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3016 wrote to memory of 5100 3016 rundll32.exe 81 PID 3016 wrote to memory of 5100 3016 rundll32.exe 81 PID 3016 wrote to memory of 5100 3016 rundll32.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Conficker binaries\223D8089F8EE82F8B05266BAECAAC61E.dll",#11⤵
- Suspicious use of WriteProcessMemory
PID:3016 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Conficker binaries\223D8089F8EE82F8B05266BAECAAC61E.dll",#12⤵PID:5100
-