Overview
overview
7Static
static
7ADB/AdbWinApi.dll
windows7-x64
3ADB/AdbWinApi.dll
windows10-2004-x64
3ADB/AdbWinUsbApi.dll
windows7-x64
1ADB/AdbWinUsbApi.dll
windows10-2004-x64
1ADB/adb.exe
windows7-x64
1ADB/adb.exe
windows10-2004-x64
1ADB/adblinux
ubuntu-18.04-amd64
AdbInterface.dll
windows7-x64
1AdbInterface.dll
windows10-2004-x64
1Dependencies/busybox
debian-9-armhf
1Dependencies/sqlite3
debian-9-armhf
DriverInstaller.dll
windows7-x64
1DriverInstaller.dll
windows10-2004-x64
1Drivers/am...09.dll
windows7-x64
1Drivers/am...09.dll
windows10-2004-x64
1Drivers/am...09.dll
windows7-x64
1Drivers/am...09.dll
windows10-2004-x64
1Drivers/am...r2.dll
windows7-x64
3Drivers/am...r2.dll
windows10-2004-x64
3Drivers/i3...09.dll
windows7-x64
1Drivers/i3...09.dll
windows10-2004-x64
1Drivers/i3...09.dll
windows7-x64
1Drivers/i3...09.dll
windows10-2004-x64
1Drivers/i3...r2.dll
windows7-x64
3Drivers/i3...r2.dll
windows10-2004-x64
3Exploits/psneuter
debian-9-armhf
1Exploits/zergRush
debian-9-armhf
Root/Superuser.apk
android-9-x86
Root/Superuser.apk
android-10-x64
Root/Superuser.apk
android-11-x64
Root/su-v1
debian-9-armhf
Root/su-v2
debian-9-armhf
Analysis
-
max time kernel
134s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 00:21
Static task
static1
Behavioral task
behavioral1
Sample
ADB/AdbWinApi.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ADB/AdbWinApi.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
ADB/AdbWinUsbApi.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
ADB/AdbWinUsbApi.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
ADB/adb.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ADB/adb.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
ADB/adblinux
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral8
Sample
AdbInterface.dll
Resource
win7-20220901-en
Behavioral task
behavioral9
Sample
AdbInterface.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral10
Sample
Dependencies/busybox
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral11
Sample
Dependencies/sqlite3
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral12
Sample
DriverInstaller.dll
Resource
win7-20220812-en
Behavioral task
behavioral13
Sample
DriverInstaller.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral14
Sample
Drivers/amd64/WUDFUpdate_01009.dll
Resource
win7-20221111-en
Behavioral task
behavioral15
Sample
Drivers/amd64/WUDFUpdate_01009.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral16
Sample
Drivers/amd64/WdfCoInstaller01009.dll
Resource
win7-20220901-en
Behavioral task
behavioral17
Sample
Drivers/amd64/WdfCoInstaller01009.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral18
Sample
Drivers/amd64/winusbcoinstaller2.dll
Resource
win7-20220812-en
Behavioral task
behavioral19
Sample
Drivers/amd64/winusbcoinstaller2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral20
Sample
Drivers/i386/WUDFUpdate_01009.dll
Resource
win7-20220812-en
Behavioral task
behavioral21
Sample
Drivers/i386/WUDFUpdate_01009.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral22
Sample
Drivers/i386/WdfCoInstaller01009.dll
Resource
win7-20221111-en
Behavioral task
behavioral23
Sample
Drivers/i386/WdfCoInstaller01009.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral24
Sample
Drivers/i386/winusbcoinstaller2.dll
Resource
win7-20220812-en
Behavioral task
behavioral25
Sample
Drivers/i386/winusbcoinstaller2.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral26
Sample
Exploits/psneuter
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral27
Sample
Exploits/zergRush
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral28
Sample
Root/Superuser.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral29
Sample
Root/Superuser.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral30
Sample
Root/Superuser.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral31
Sample
Root/su-v1
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral32
Sample
Root/su-v2
Resource
debian9-armhf-en-20211208
General
-
Target
Drivers/amd64/winusbcoinstaller2.dll
-
Size
979KB
-
MD5
246900ce6474718730ecd4f873234cf5
-
SHA1
0c84b56c82e4624824154d27926ded1c45f4b331
-
SHA256
981a17effddbc20377512ddaec9f22c2b7067e17a3e2a8ccf82bb7bb7b2420b6
-
SHA512
6a9e305bfbfb57d8f8fd16edabef9291a8a97e4b9c2ae90622f6c056e518a0a731fbb3e33a2591d87c8e4293d0f983ec515e6a241792962257b82401a8811d5c
-
SSDEEP
24576:aAEBXzGJ7fW6hHv62VYeL7WCE3wixdLZWQzMjp:uBXQz/hPzxRwPdcO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3872 4528 WerFault.exe 13
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Drivers\amd64\winusbcoinstaller2.dll,#11⤵PID:4528
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4528 -s 3922⤵
- Program crash
PID:3872
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 372 -p 4528 -ip 45281⤵PID:1912