Overview
overview
10Static
static
107.0.0.0.exe
windows7-x64
77.0.0.0.exe
windows10-2004-x64
7ILMerge.exe
windows7-x64
1ILMerge.exe
windows10-2004-x64
1pack/AbPmX.exe
windows7-x64
10pack/AbPmX.exe
windows10-2004-x64
10pack/AcAoB.exe
windows7-x64
10pack/AcAoB.exe
windows10-2004-x64
10pack/AdEXN.exe
windows7-x64
10pack/AdEXN.exe
windows10-2004-x64
10pack/AeCKK.exe
windows7-x64
1pack/AeCKK.exe
windows10-2004-x64
1pack/AeSRJ.exe
windows7-x64
7pack/AeSRJ.exe
windows10-2004-x64
7pack/AfDTM.exe
windows7-x64
10pack/AfDTM.exe
windows10-2004-x64
10pack/AfMaR.exe
windows7-x64
10pack/AfMaR.exe
windows10-2004-x64
10pack/AfZcW.exe
windows7-x64
10pack/AfZcW.exe
windows10-2004-x64
10pack/AnWLP.exe
windows7-x64
1pack/AnWLP.exe
windows10-2004-x64
1pack/AnZNZ.exe
windows7-x64
10pack/AnZNZ.exe
windows10-2004-x64
10pack/ApRnS.exe
windows7-x64
10pack/ApRnS.exe
windows10-2004-x64
10pack/AqDpY.exe
windows7-x64
1pack/AqDpY.exe
windows10-2004-x64
1pack/AsNMX.exe
windows7-x64
1pack/AsNMX.exe
windows10-2004-x64
1pack/AwHQZ.exe
windows7-x64
10pack/AwHQZ.exe
windows10-2004-x64
10Analysis
-
max time kernel
91s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
10-08-2022 11:00
Static task
static1
Behavioral task
behavioral1
Sample
7.0.0.0.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
7.0.0.0.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral3
Sample
ILMerge.exe
Resource
win7-20220715-en
Behavioral task
behavioral4
Sample
ILMerge.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral5
Sample
pack/AbPmX.exe
Resource
win7-20220715-en
Behavioral task
behavioral6
Sample
pack/AbPmX.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral7
Sample
pack/AcAoB.exe
Resource
win7-20220715-en
Behavioral task
behavioral8
Sample
pack/AcAoB.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral9
Sample
pack/AdEXN.exe
Resource
win7-20220718-en
Behavioral task
behavioral10
Sample
pack/AdEXN.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral11
Sample
pack/AeCKK.exe
Resource
win7-20220718-en
Behavioral task
behavioral12
Sample
pack/AeCKK.exe
Resource
win10v2004-20220722-en
Behavioral task
behavioral13
Sample
pack/AeSRJ.exe
Resource
win7-20220718-en
Behavioral task
behavioral14
Sample
pack/AeSRJ.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral15
Sample
pack/AfDTM.exe
Resource
win7-20220715-en
Behavioral task
behavioral16
Sample
pack/AfDTM.exe
Resource
win10v2004-20220722-en
Behavioral task
behavioral17
Sample
pack/AfMaR.exe
Resource
win7-20220718-en
Behavioral task
behavioral18
Sample
pack/AfMaR.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral19
Sample
pack/AfZcW.exe
Resource
win7-20220715-en
Behavioral task
behavioral20
Sample
pack/AfZcW.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral21
Sample
pack/AnWLP.exe
Resource
win7-20220715-en
Behavioral task
behavioral22
Sample
pack/AnWLP.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral23
Sample
pack/AnZNZ.exe
Resource
win7-20220715-en
Behavioral task
behavioral24
Sample
pack/AnZNZ.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral25
Sample
pack/ApRnS.exe
Resource
win7-20220718-en
Behavioral task
behavioral26
Sample
pack/ApRnS.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral27
Sample
pack/AqDpY.exe
Resource
win7-20220715-en
Behavioral task
behavioral28
Sample
pack/AqDpY.exe
Resource
win10v2004-20220721-en
Behavioral task
behavioral29
Sample
pack/AsNMX.exe
Resource
win7-20220718-en
Behavioral task
behavioral30
Sample
pack/AsNMX.exe
Resource
win10v2004-20220722-en
Behavioral task
behavioral31
Sample
pack/AwHQZ.exe
Resource
win7-20220718-en
General
-
Target
7.0.0.0.exe
-
Size
6.4MB
-
MD5
514ca6348b6d29069d6b436fc1f1c159
-
SHA1
ebd3d2d7924b78a165eb2d689eae5ff90c709e01
-
SHA256
35b846afc6bf51292d8a401a68a24a0e36d131d7798ceaa8713f08b6942fe0b5
-
SHA512
e51f635718f021f5f238b2510c8e7b99b57318cbcbae09773ea123c275f48156f6ca76be6aaea7901a6d7351d54aa8486dbcd01160a18082c59fb09211ab533e
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2556 7.0.0.0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2556 7.0.0.0.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2556 7.0.0.0.exe 2556 7.0.0.0.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
MD59af5eb006bb0bab7f226272d82c896c7
SHA1c2a5bb42a5f08f4dc821be374b700652262308f0
SHA25677dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db
SHA5127badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a