Overview
overview
8Static
static
8(...ng.dll
windows7-x64
1(...ng.dll
windows10-2004-x64
1(...ng.dll
windows7-x64
1(...ng.dll
windows10-2004-x64
1(...ng.dll
windows7-x64
1(...ng.dll
windows10-2004-x64
1(...ng.dll
windows7-x64
1(...ng.dll
windows10-2004-x64
1FileOpenSH.dll
windows7-x64
1FileOpenSH.dll
windows10-2004-x64
3GetPcInfo.exe
windows7-x64
1GetPcInfo.exe
windows10-2004-x64
1Index_dll.dll
windows7-x64
3Index_dll.dll
windows10-2004-x64
3K3ICWorkFlow.dll
windows7-x64
1K3ICWorkFlow.dll
windows10-2004-x64
1KmInst32.exe
windows7-x64
1KmInst32.exe
windows10-2004-x64
1KmSetKX32.exe
windows7-x64
1KmSetKX32.exe
windows10-2004-x64
1Netviewer....es.dll
windows7-x64
1Netviewer....es.dll
windows10-2004-x64
1PFXRsaCertDown.dll
windows7-x64
1PFXRsaCertDown.dll
windows10-2004-x64
1Pdfcore.exe
windows7-x64
1Pdfcore.exe
windows10-2004-x64
3SafeDogGua...er.exe
windows7-x64
8SafeDogGua...er.exe
windows10-2004-x64
8SafeDogNetDrv08.exe
windows7-x64
SafeDogNetDrv08.exe
windows10-2004-x64
hpmcro32.dll
windows7-x64
1hpmcro32.dll
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
183s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
08-09-2022 05:32
Behavioral task
behavioral1
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
FileOpenSH.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
FileOpenSH.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
GetPcInfo.exe
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
GetPcInfo.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
Index_dll.dll
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
Index_dll.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral15
Sample
K3ICWorkFlow.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
K3ICWorkFlow.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
KmInst32.exe
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
KmInst32.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
KmSetKX32.exe
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
KmSetKX32.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
Netviewer.resources.dll
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
Netviewer.resources.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
PFXRsaCertDown.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
PFXRsaCertDown.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
Pdfcore.exe
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
Pdfcore.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
SafeDogGuardCenter.exe
Resource
win7-20220901-en
Behavioral task
behavioral28
Sample
SafeDogGuardCenter.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
SafeDogNetDrv08.exe
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
SafeDogNetDrv08.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
hpmcro32.dll
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
hpmcro32.dll
Resource
win10v2004-20220812-en
General
-
Target
SafeDogGuardCenter.exe
-
Size
1021KB
-
MD5
ab86e7053c42a6410f0d05a14dfa595b
-
SHA1
0f829850c141bc9dc246784ba7c60751b7637325
-
SHA256
a39bc15fb5a82a9a922a16d4ed9008dfb3ca842504b45c0bf42be468f357ed2d
-
SHA512
fa02316c03a0fdddc59c41c55628a1e2b2e737ba1000ed3aff7f41f0070fab8cbe4467fa6395618db631bd28933aa1bdf8fd3e4690a996c9fc6f607bff333c1d
-
SSDEEP
24576:t3tKn1czU+PITxnHnkht57ECVjSxWG8P+v8YzWSP:t3TU+PSxHkl7EW8q+kYl
Malware Config
Signatures
-
resource yara_rule behavioral28/memory/2932-132-0x0000000000400000-0x0000000000661000-memory.dmp vmprotect