Overview
overview
10Static
static
10Plugin/cam.dll
windows7-x64
1Plugin/cam.dll
windows10-2004-x64
1Plugin/ch.dll
windows7-x64
1Plugin/ch.dll
windows10-2004-x64
1Plugin/mic.dll
windows7-x64
1Plugin/mic.dll
windows10-2004-x64
1Plugin/plg.dll
windows7-x64
1Plugin/plg.dll
windows10-2004-x64
1Plugin/pw.dll
windows7-x64
1Plugin/pw.dll
windows10-2004-x64
1Plugin/sc2.dll
windows7-x64
1Plugin/sc2.dll
windows10-2004-x64
1Stub.xml
windows7-x64
1Stub.xml
windows10-2004-x64
1WinMM.Net.dll
windows7-x64
1WinMM.Net.dll
windows10-2004-x64
1njRAT v0.7d.exe
windows7-x64
10njRAT v0.7d.exe
windows10-2004-x64
10stub.ps1
windows7-x64
1stub.ps1
windows10-2004-x64
1Analysis
-
max time kernel
20s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
26-11-2022 14:47
Behavioral task
behavioral1
Sample
Plugin/cam.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Plugin/cam.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Plugin/ch.dll
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
Plugin/ch.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
Plugin/mic.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
Plugin/mic.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Plugin/plg.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
Plugin/plg.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
Plugin/pw.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
Plugin/pw.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
Plugin/sc2.dll
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
Plugin/sc2.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
Stub.xml
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
Stub.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
WinMM.Net.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
WinMM.Net.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
njRAT v0.7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
njRAT v0.7d.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
stub.ps1
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
stub.ps1
Resource
win10v2004-20220901-en
General
-
Target
Plugin/cam.dll
-
Size
63KB
-
MD5
a73edb60b80a2dfa86735d821bea7b19
-
SHA1
f39a54d7bc25425578a2b800033e4508714a73ed
-
SHA256
7a4977b024d048b71bcc8f1cc65fb06e4353821323f852dc6740b79b9ab75c98
-
SHA512
283e9206d0b56c1f8b0741375ccd0a184410cf89f5f42dfe91e7438c5fd0ac7fa4afbb84b8b7ea448b3093397552fd3731b9be74c67b846d946da486dcf0df68
-
SSDEEP
1536:7EoML5LFXbUu5ExN3hep+cx4sKcuxpSe:7ERZxQxep+cx5Kcu3
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 2040 wrote to memory of 1100 2040 rundll32.exe rundll32.exe PID 2040 wrote to memory of 1100 2040 rundll32.exe rundll32.exe PID 2040 wrote to memory of 1100 2040 rundll32.exe rundll32.exe PID 2040 wrote to memory of 1100 2040 rundll32.exe rundll32.exe PID 2040 wrote to memory of 1100 2040 rundll32.exe rundll32.exe PID 2040 wrote to memory of 1100 2040 rundll32.exe rundll32.exe PID 2040 wrote to memory of 1100 2040 rundll32.exe rundll32.exe