Overview

overview

1

Static

static

CADChart/C...rt.dll

windows7-x64

1

CADChart/C...rt.dll

windows10-2004-x64

1

CADChart/C...rt.dll

windows7-x64

1

CADChart/C...rt.dll

windows10-2004-x64

1

CADChart/C...rt.dll

windows7-x64

1

CADChart/C...rt.dll

windows10-2004-x64

1

CADChart/C...rt.dll

windows7-x64

1

CADChart/C...rt.dll

windows10-2004-x64

1

CADChart/H...rm1.js

windows7-x64

1

CADChart/H...rm1.js

windows10-2004-x64

1

CADChart/H...er.vbs

windows7-x64

1

CADChart/H...er.vbs

windows10-2004-x64

1

CADChart/H...es.vbs

windows7-x64

1

CADChart/H...es.vbs

windows10-2004-x64

1

CADChart/H...rt.dll

windows7-x64

1

CADChart/H...rt.dll

windows10-2004-x64

1

CADChart/H...rt.dll

windows7-x64

1

CADChart/H...rt.dll

windows10-2004-x64

1

CADChart/H...rt.exe

windows7-x64

1

CADChart/H...rt.exe

windows10-2004-x64

1

CADChart/H...st.exe

windows7-x64

1

CADChart/H...st.exe

windows10-2004-x64

1

CADChart/H...ib.dll

windows7-x64

1

CADChart/H...ib.dll

windows10-2004-x64

1

CADChart/H...rt.exe

windows7-x64

1

CADChart/H...rt.exe

windows10-2004-x64

1

CADChart/H...cs.dll

windows7-x64

1

CADChart/H...cs.dll

windows10-2004-x64

CADChart/H...cs.dll

windows7-x64

1

CADChart/H...cs.dll

windows10-2004-x64

1

土木工�...��.url

windows7-x64

1

土木工�...��.url

windows10-2004-x64

1

Analysis

  • max time kernel
    40s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    24/11/2022, 08:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CADChart/HydroCADChart/bin/Debug/HydroCADChart.vshost.exe

  • Size

    5KB

  • MD5

    d9086aab959707dd1a8643f3df70db9d

  • SHA1

    31e855c2fbd8f69b0cc149696e3fd9ca887a30c4

  • SHA256

    07470371b6c705a49965ae5d98e26450b9fef50e4ba4851de91e29e9721ab197

  • SHA512

    7ce65c130e3e13683a0265fb5171d2a869f0c5059ee1e38728736963c832af4cebfe9b2384b7e12beac21f0414c54ed021d331d4f51ebb1ed5f34d6e709eca57

  • SSDEEP

    48:6PYfPQwY7B/6U7ghNb6REKUh7U2+Ivpo/fD3K/zDbdstXe8ZWfZEpK5zhGB5WguN:BPBYHguj2xvpafD3KrDbdsfWO0VmWgO

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CADChart\HydroCADChart\bin\Debug\HydroCADChart.vshost.exe
    "C:\Users\Admin\AppData\Local\Temp\CADChart\HydroCADChart\bin\Debug\HydroCADChart.vshost.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1372
    • C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
      dw20.exe -x -s 372
      2⤵
        PID:1232

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1232-55-0x000007FEFC1F1000-0x000007FEFC1F3000-memory.dmp

      Filesize

      8KB

      Download