Overview
overview
10Static
static
10out0.exe
windows7-x64
1out0.exe
windows10-2004-x64
1out1.exe
windows7-x64
1out1.exe
windows10-2004-x64
1out10.exe
windows7-x64
1out10.exe
windows10-2004-x64
1out11.exe
windows7-x64
1out11.exe
windows10-2004-x64
1out12.exe
windows7-x64
1out12.exe
windows10-2004-x64
1out13.exe
windows7-x64
1out13.exe
windows10-2004-x64
1out14.exe
windows7-x64
1out14.exe
windows10-2004-x64
1out15.exe
windows7-x64
1out15.exe
windows10-2004-x64
1out16.exe
windows7-x64
1out16.exe
windows10-2004-x64
1out17.exe
windows7-x64
1out17.exe
windows10-2004-x64
1out18.exe
windows7-x64
1out18.exe
windows10-2004-x64
1out19.exe
windows7-x64
out19.exe
windows10-2004-x64
out2.exe
windows7-x64
1out2.exe
windows10-2004-x64
1out20.exe
windows7-x64
1out20.exe
windows10-2004-x64
1out21.exe
windows7-x64
1out21.exe
windows10-2004-x64
1out22.exe
windows7-x64
1out22.exe
windows10-2004-x64
1Analysis
-
max time kernel
130s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
08-11-2022 01:10
Behavioral task
behavioral1
Sample
out0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
out0.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
out1.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
out1.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
out10.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
out10.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
out11.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
out11.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
out12.exe
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
out12.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
out13.exe
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
out13.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
out14.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
out14.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
out15.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
out15.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
out16.exe
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
out16.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
out17.exe
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
out17.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
out18.exe
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
out18.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
out19.exe
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
out19.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
out2.exe
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
out2.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
out20.exe
Resource
win7-20220901-en
Behavioral task
behavioral28
Sample
out20.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral29
Sample
out21.exe
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
out21.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
out22.exe
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
out22.exe
Resource
win10v2004-20220901-en
General
-
Target
out10.exe
-
Size
72KB
-
MD5
bc6a46e9f5e8569e07b0e9db822d2853
-
SHA1
ec05845cc65b30805f2ca4be8d68add3251407a2
-
SHA256
7d9415b6a84c8e60e15491eb3a1d9a2831682ae07f993ab46c0aa70377098320
-
SHA512
198741e0b69ca07e3a42688991bd1ba7ee334a4cb46c40817c0622483f672972320b6cd68372f03a70a94091ed3be762e24f119804a5fb432d7b81f0f2a04513
-
SSDEEP
1536:ICJA4PqtPVQ692z2DVL+CDTuMb+KR0Nc8QsJq39:WhPVQ692zQL5ue0Nc8QsC9
Malware Config
Signatures
-
Modifies registry class 1 IoCs
Processes:
calc.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-2295526160-1155304984-640977766-1000_Classes\Local Settings calc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 4924 OpenWith.exe -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
out10.exedescription pid process target process PID 4068 wrote to memory of 3132 4068 out10.exe calc.exe PID 4068 wrote to memory of 3132 4068 out10.exe calc.exe PID 4068 wrote to memory of 3132 4068 out10.exe calc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\out10.exe"C:\Users\Admin\AppData\Local\Temp\out10.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4068 -
C:\Windows\SysWOW64\calc.execalc.exe2⤵
- Modifies registry class
PID:3132
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4924