Overview
overview
10Static
static
10out0.exe
windows7-x64
1out0.exe
windows10-2004-x64
1out1.exe
windows7-x64
1out1.exe
windows10-2004-x64
1out10.exe
windows7-x64
1out10.exe
windows10-2004-x64
1out11.exe
windows7-x64
1out11.exe
windows10-2004-x64
1out12.exe
windows7-x64
1out12.exe
windows10-2004-x64
1out13.exe
windows7-x64
1out13.exe
windows10-2004-x64
1out14.exe
windows7-x64
1out14.exe
windows10-2004-x64
1out15.exe
windows7-x64
1out15.exe
windows10-2004-x64
1out16.exe
windows7-x64
1out16.exe
windows10-2004-x64
1out17.exe
windows7-x64
1out17.exe
windows10-2004-x64
1out18.exe
windows7-x64
1out18.exe
windows10-2004-x64
1out19.exe
windows7-x64
out19.exe
windows10-2004-x64
out2.exe
windows7-x64
1out2.exe
windows10-2004-x64
1out20.exe
windows7-x64
1out20.exe
windows10-2004-x64
1out21.exe
windows7-x64
1out21.exe
windows10-2004-x64
1out22.exe
windows7-x64
1out22.exe
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
08-11-2022 01:10
Behavioral task
behavioral1
Sample
out0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
out0.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
out1.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
out1.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
out10.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
out10.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
out11.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
out11.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
out12.exe
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
out12.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
out13.exe
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
out13.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
out14.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
out14.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
out15.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
out15.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
out16.exe
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
out16.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
out17.exe
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
out17.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
out18.exe
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
out18.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
out19.exe
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
out19.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
out2.exe
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
out2.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
out20.exe
Resource
win7-20220901-en
Behavioral task
behavioral28
Sample
out20.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral29
Sample
out21.exe
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
out21.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
out22.exe
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
out22.exe
Resource
win10v2004-20220901-en
General
-
Target
out12.exe
-
Size
72KB
-
MD5
cec7fee9ab5614cca3417067bbd6b305
-
SHA1
6df9111004d0a8f77056c4c9d20d2493315f03ba
-
SHA256
f172c6ba8e0198f39d3acc07034e772c432fe63877435de7837ee56dc0bd7f9e
-
SHA512
acfe23a7b2927117d5030d1239e72cadc8cf880b2cb9abe9d16eaaa80e2f4b978ca9cc62b937ecacb5bebd32b90672ef4b83b22e03448d2f3bae8d8c00bae725
-
SSDEEP
1536:IBh/yJpH5+ImRf/Ml6sovqSPZXM1wO4BMb+KR0Nc8QsJq39:Mh/M/+I6f/MzCqSPySO4Be0Nc8QsC9
Malware Config
Signatures
-
Modifies registry class 1 IoCs
Processes:
calc.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000_Classes\Local Settings calc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 4632 OpenWith.exe -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
out12.exedescription pid process target process PID 1612 wrote to memory of 2732 1612 out12.exe calc.exe PID 1612 wrote to memory of 2732 1612 out12.exe calc.exe PID 1612 wrote to memory of 2732 1612 out12.exe calc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\out12.exe"C:\Users\Admin\AppData\Local\Temp\out12.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1612 -
C:\Windows\SysWOW64\calc.execalc.exe2⤵
- Modifies registry class
PID:2732
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4632