Overview
overview
9Static
static
9APT-Hunter...er.pdf
windows7_x64
1APT-Hunter...er.pdf
windows10-2004_x64
1APT-Hunter...er.vbs
windows7_x64
1APT-Hunter...er.vbs
windows10-2004_x64
1APT-Hunter...er.exe
windows7_x64
1APT-Hunter...er.exe
windows10-2004_x64
1APT-Hunter...er.exe
windows7_x64
1APT-Hunter...er.exe
windows10-2004_x64
1APT-Hunter...se.exe
windows7_x64
1APT-Hunter...se.exe
windows10-2004_x64
1APT-Hunter...24.dll
windows7_x64
8APT-Hunter...24.dll
windows10-2004_x64
8APT-Hunter...fc.exe
windows7_x64
1APT-Hunter...fc.exe
windows10-2004_x64
1APT-Hunter...ile.pl
windows7_x64
3APT-Hunter...ile.pl
windows10-2004_x64
3APT-Hunter...rse.pl
windows7_x64
3APT-Hunter...rse.pl
windows10-2004_x64
3APT-Hunter...rpt.pl
windows7_x64
3APT-Hunter...rpt.pl
windows10-2004_x64
3APT-Hunter...rse.pl
windows7_x64
3APT-Hunter...rse.pl
windows10-2004_x64
3APT-Hunter...rse.pl
windows7_x64
3APT-Hunter...rse.pl
windows10-2004_x64
3APT-Hunter...idx.pl
windows7_x64
3APT-Hunter...idx.pl
windows10-2004_x64
3APT-Hunter.../jl.pl
windows7_x64
3APT-Hunter.../jl.pl
windows10-2004_x64
3APT-Hunter...rse.pl
windows7_x64
3APT-Hunter...rse.pl
windows10-2004_x64
3APT-Hunter...lnk.pl
windows7_x64
3APT-Hunter...lnk.pl
windows10-2004_x64
3Analysis
-
max time kernel
45s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
27-05-2022 20:21
Behavioral task
behavioral1
Sample
APT-Hunter-master/APTHunter.pdf
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
APT-Hunter-master/APTHunter.pdf
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
APT-Hunter-master/APT_Hunter.vbs
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
APT-Hunter-master/APT_Hunter.vbs
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
APT-Hunter-master/Tools/AmCacheParser/AmcacheParser.exe
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
APT-Hunter-master/Tools/AmCacheParser/AmcacheParser.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
APT-Hunter-master/Tools/AppCompatCacheParser/AppCompatCacheParser.exe
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
APT-Hunter-master/Tools/AppCompatCacheParser/AppCompatCacheParser.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral9
Sample
APT-Hunter-master/Tools/HCTOOLS/jobparse.exe
Resource
win7-20220414-en
Behavioral task
behavioral10
Sample
APT-Hunter-master/Tools/HCTOOLS/jobparse.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral11
Sample
APT-Hunter-master/Tools/HCTOOLS/p2x5124.dll
Resource
win7-20220414-en
Behavioral task
behavioral12
Sample
APT-Hunter-master/Tools/HCTOOLS/p2x5124.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral13
Sample
APT-Hunter-master/Tools/HCTOOLS/rfc.exe
Resource
win7-20220414-en
Behavioral task
behavioral14
Sample
APT-Hunter-master/Tools/HCTOOLS/rfc.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral15
Sample
APT-Hunter-master/Tools/HCTOOLS/source/bodyfile.pl
Resource
win7-20220414-en
Behavioral task
behavioral16
Sample
APT-Hunter-master/Tools/HCTOOLS/source/bodyfile.pl
Resource
win10v2004-20220414-en
Behavioral task
behavioral17
Sample
APT-Hunter-master/Tools/HCTOOLS/source/evtparse.pl
Resource
win7-20220414-en
Behavioral task
behavioral18
Sample
APT-Hunter-master/Tools/HCTOOLS/source/evtparse.pl
Resource
win10v2004-20220414-en
Behavioral task
behavioral19
Sample
APT-Hunter-master/Tools/HCTOOLS/source/evtrpt.pl
Resource
win7-20220414-en
Behavioral task
behavioral20
Sample
APT-Hunter-master/Tools/HCTOOLS/source/evtrpt.pl
Resource
win10v2004-20220414-en
Behavioral task
behavioral21
Sample
APT-Hunter-master/Tools/HCTOOLS/source/evtxparse.pl
Resource
win7-20220414-en
Behavioral task
behavioral22
Sample
APT-Hunter-master/Tools/HCTOOLS/source/evtxparse.pl
Resource
win10v2004-20220414-en
Behavioral task
behavioral23
Sample
APT-Hunter-master/Tools/HCTOOLS/source/ftkparse.pl
Resource
win7-20220414-en
Behavioral task
behavioral24
Sample
APT-Hunter-master/Tools/HCTOOLS/source/ftkparse.pl
Resource
win10v2004-20220414-en
Behavioral task
behavioral25
Sample
APT-Hunter-master/Tools/HCTOOLS/source/idx.pl
Resource
win7-20220414-en
Behavioral task
behavioral26
Sample
APT-Hunter-master/Tools/HCTOOLS/source/idx.pl
Resource
win10v2004-20220414-en
Behavioral task
behavioral27
Sample
APT-Hunter-master/Tools/HCTOOLS/source/jl.pl
Resource
win7-20220414-en
Behavioral task
behavioral28
Sample
APT-Hunter-master/Tools/HCTOOLS/source/jl.pl
Resource
win10v2004-20220414-en
Behavioral task
behavioral29
Sample
APT-Hunter-master/Tools/HCTOOLS/source/jobparse.pl
Resource
win7-20220414-en
Behavioral task
behavioral30
Sample
APT-Hunter-master/Tools/HCTOOLS/source/jobparse.pl
Resource
win10v2004-20220414-en
Behavioral task
behavioral31
Sample
APT-Hunter-master/Tools/HCTOOLS/source/lnk.pl
Resource
win7-20220414-en
Behavioral task
behavioral32
Sample
APT-Hunter-master/Tools/HCTOOLS/source/lnk.pl
Resource
win10v2004-20220414-en
General
-
Target
APT-Hunter-master/Tools/AmCacheParser/AmcacheParser.exe
-
Size
626KB
-
MD5
5614739792854897f86dcf2d0ed61006
-
SHA1
4567a711321cc034c1296125bf5f27093d2be210
-
SHA256
91148b38f25a9c720cd43ecd2571d684b81c4b865742526a672a07669b7dbf62
-
SHA512
5119c02f178f7cab4bbe80240b8c65f794d556793e2959856b11a61988ffb95d6e141b1326dbc1ee99152f36c622365b8ed5811948c89752a36a0187cc0cce98
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1644-54-0x0000000000260000-0x0000000000302000-memory.dmpFilesize
648KB
-
memory/1644-55-0x00000000007B0000-0x00000000007BC000-memory.dmpFilesize
48KB
-
memory/1644-56-0x0000000004610000-0x000000000468C000-memory.dmpFilesize
496KB
-
memory/1644-57-0x00000000007D0000-0x00000000007E2000-memory.dmpFilesize
72KB
-
memory/1644-58-0x0000000001DA0000-0x0000000001DBA000-memory.dmpFilesize
104KB
-
memory/1644-59-0x0000000076781000-0x0000000076783000-memory.dmpFilesize
8KB
-
memory/1644-60-0x0000000072B70000-0x0000000073EFF000-memory.dmpFilesize
19.6MB
-
memory/1644-61-0x0000000072160000-0x0000000072B70000-memory.dmpFilesize
10.1MB
-
memory/1644-62-0x0000000071980000-0x0000000072160000-memory.dmpFilesize
7.9MB
-
memory/1644-63-0x0000000074790000-0x0000000074924000-memory.dmpFilesize
1.6MB
-
memory/1644-65-0x0000000070C60000-0x000000007197D000-memory.dmpFilesize
13.1MB
-
memory/1644-64-0x000000006F210000-0x000000007051F000-memory.dmpFilesize
19.1MB
-
memory/1644-66-0x0000000074690000-0x000000007478C000-memory.dmpFilesize
1008KB
-
memory/1644-67-0x0000000070520000-0x0000000070C5E000-memory.dmpFilesize
7.2MB
-
memory/1644-68-0x000000006EA20000-0x000000006F204000-memory.dmpFilesize
7.9MB
-
memory/1644-69-0x000000006E760000-0x000000006EA1B000-memory.dmpFilesize
2.7MB
-
memory/1644-70-0x0000000072B70000-0x0000000073EFF000-memory.dmpFilesize
19.6MB