Overview
overview
7Static
static
HearthCraw...CC.dll
windows7-x64
1HearthCraw...CC.dll
windows10-2004-x64
1HearthCraw...ne.dll
windows7-x64
1HearthCraw...ne.dll
windows10-2004-x64
1HearthCraw...er.exe
windows7-x64
5HearthCraw...er.exe
windows10-2004-x64
3HearthCraw...nt.exe
windows7-x64
1HearthCraw...nt.exe
windows10-2004-x64
1HearthCraw...nt.dll
windows7-x64
1HearthCraw...nt.dll
windows10-2004-x64
1HearthCraw...er.exe
windows7-x64
5HearthCraw...er.exe
windows10-2004-x64
HearthCraw...re.dll
windows7-x64
3HearthCraw...re.dll
windows10-2004-x64
3HearthCraw...ui.dll
windows7-x64
3HearthCraw...ui.dll
windows10-2004-x64
3HearthCraw...rk.dll
windows7-x64
3HearthCraw...rk.dll
windows10-2004-x64
3HearthCraw...ts.dll
windows7-x64
3HearthCraw...ts.dll
windows10-2004-x64
3HearthCraw...er.exe
windows7-x64
3HearthCraw...er.exe
windows10-2004-x64
3HearthCraw...52.dll
windows7-x64
3HearthCraw...52.dll
windows10-2004-x64
3HearthCraw...52.dll
windows7-x64
3HearthCraw...52.dll
windows10-2004-x64
3HearthCraw...52.dll
windows7-x64
1HearthCraw...52.dll
windows10-2004-x64
1HearthCraw...if.dll
windows7-x64
1HearthCraw...if.dll
windows10-2004-x64
1HearthCraw...32.dll
windows7-x64
1HearthCraw...32.dll
windows10-2004-x64
1Analysis
-
max time network
595s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 19:37
Static task
static1
Behavioral task
behavioral1
Sample
HearthCrawler_R30_10/Bots/DragonCC/DragonCC.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
HearthCrawler_R30_10/Bots/DragonCC/DragonCC.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
HearthCrawler_R30_10/Engine/HREngine.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
HearthCrawler_R30_10/Engine/HREngine.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
HearthCrawler_R30_10/HearthLoader.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
HearthCrawler_R30_10/HearthLoader.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
HearthCrawler_R30_10/Hearthcrawler.Agent.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
HearthCrawler_R30_10/Hearthcrawler.Agent.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
HearthCrawler_R30_10/Hearthcrawler.Client.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
HearthCrawler_R30_10/Hearthcrawler.Client.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
HearthCrawler_R30_10/Hearthcrawler.exe
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
HearthCrawler_R30_10/Hearthcrawler.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
HearthCrawler_R30_10/Qt5Core.dll
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
HearthCrawler_R30_10/Qt5Core.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
HearthCrawler_R30_10/Qt5Gui.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
HearthCrawler_R30_10/Qt5Gui.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
HearthCrawler_R30_10/Qt5Network.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
HearthCrawler_R30_10/Qt5Network.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
HearthCrawler_R30_10/Qt5Widgets.dll
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
HearthCrawler_R30_10/Qt5Widgets.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
HearthCrawler_R30_10/Tools/HRCompiler.exe
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
HearthCrawler_R30_10/Tools/HRCompiler.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
HearthCrawler_R30_10/icudt52.dll
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
HearthCrawler_R30_10/icudt52.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
HearthCrawler_R30_10/icuin52.dll
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
HearthCrawler_R30_10/icuin52.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
HearthCrawler_R30_10/icuuc52.dll
Resource
win7-20221111-en
Behavioral task
behavioral28
Sample
HearthCrawler_R30_10/icuuc52.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
HearthCrawler_R30_10/imageformats/qgif.dll
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
HearthCrawler_R30_10/imageformats/qgif.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
HearthCrawler_R30_10/libeay32.dll
Resource
win7-20221111-en
Behavioral task
behavioral32
Sample
HearthCrawler_R30_10/libeay32.dll
Resource
win10v2004-20221111-en
Errors
General
-
Target
HearthCrawler_R30_10/Hearthcrawler.exe
-
Size
897KB
-
MD5
b1957d42e692bde123f46c69bf5a8c07
-
SHA1
fc888e6553e2a7bef9cf875fb128abd4ce54b79d
-
SHA256
cf51afce6ebdadcf2546873479b49b00e1df8296c9ddcea1e52bb787eac4b596
-
SHA512
26652121c01bf0c32501dd481c96ea351e404eb2b3294299c0a35f59668a4d2f5c6356f4a3da971946ed96d555d56f531a9e58d51fd27c7b678596dc63a431f3
-
SSDEEP
24576:jgvnYTQmGhVekKcGQfOZhROydA/Fer49uPQJcDKwNgnnPd:jgQTQmeekKcfmZbAN7obHNQ
Malware Config
Signatures
-
Unexpected DNS network traffic destination 2 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes:
description ioc Destination IP 162.159.36.2 Destination IP 162.159.36.2