Overview
overview
1Static
static
PhotoPista...io.exe
windows7-x64
1PhotoPista...io.exe
windows10-2004-x64
1PhotoPista...R2.htm
windows7-x64
1PhotoPista...R2.htm
windows10-2004-x64
1PhotoPista...es.htm
windows7-x64
1PhotoPista...es.htm
windows10-2004-x64
1PhotoPista...de.htm
windows7-x64
1PhotoPista...de.htm
windows10-2004-x64
1PhotoPista...de.htm
windows7-x64
1PhotoPista...de.htm
windows10-2004-x64
1PhotoPista...ar.exe
windows7-x64
1PhotoPista...ar.exe
windows10-2004-x64
1PhotoPista...xt.dll
windows7-x64
1PhotoPista...xt.dll
windows10-2004-x64
1PhotoPista...es.htm
windows7-x64
1PhotoPista...es.htm
windows10-2004-x64
1PhotoPista...ng.htm
windows7-x64
1PhotoPista...ng.htm
windows10-2004-x64
1PhotoPista...ex.htm
windows7-x64
1PhotoPista...ex.htm
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
13-09-2022 09:11
Static task
static1
Behavioral task
behavioral1
Sample
PhotoPistachio/PhotoPistachio.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PhotoPistachio/PhotoPistachio.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
PhotoPistachio/QuickPar/AboutPAR2.htm
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
PhotoPistachio/QuickPar/AboutPAR2.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
PhotoPistachio/QuickPar/CreatingPAR2Files.htm
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
PhotoPistachio/QuickPar/CreatingPAR2Files.htm
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
PhotoPistachio/QuickPar/DownloadingGuide.htm
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
PhotoPistachio/QuickPar/DownloadingGuide.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
PhotoPistachio/QuickPar/PostingGuide.htm
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
PhotoPistachio/QuickPar/PostingGuide.htm
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
PhotoPistachio/QuickPar/QuickPar.exe
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
PhotoPistachio/QuickPar/QuickPar.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
PhotoPistachio/QuickPar/QuickParShlExt.dll
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
PhotoPistachio/QuickPar/QuickParShlExt.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
PhotoPistachio/QuickPar/ReleaseNotes.htm
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
PhotoPistachio/QuickPar/ReleaseNotes.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
PhotoPistachio/QuickPar/VerifyingAndRepairing.htm
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
PhotoPistachio/QuickPar/VerifyingAndRepairing.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
PhotoPistachio/QuickPar/index.htm
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
PhotoPistachio/QuickPar/index.htm
Resource
win10v2004-20220812-en
General
-
Target
PhotoPistachio/QuickPar/QuickPar.exe
-
Size
664KB
-
MD5
45ca6691157f04647219d7883e183ad9
-
SHA1
2117345f7933da9dc645835800719ab448a6c34d
-
SHA256
eb3eba82ce18c017b1f2f3d83eca39b5500b6e91b9bb353c4ff19455275fb08d
-
SHA512
71803ce8bc58e3afd64c540a9d84d27fc9664f91d4dab8d38210034349924dc703731d755d5a2a15d90a8f83a91de777c31ad7ea00905ed621307b9169d1077a
-
SSDEEP
12288:PMyzfaPMOGfS5dVUcj/ZRowESYYRE6ZsXLEjCo9:UyzfaPMOFdVU2/ZRowEZMEGs7E
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4172 QuickPar.exe 4172 QuickPar.exe