Overview
overview
7Static
static
OBS/Config...gc.dll
windows7-x64
1OBS/Config...gc.dll
windows10-2004-x64
1OBS/Config...ck.dll
windows7-x64
1OBS/Config...ck.dll
windows10-2004-x64
1OBS/Config...xy.dll
windows7-x64
1OBS/Config...xy.dll
windows10-2004-x64
1OBS/Config...xe.dll
windows7-x64
1OBS/Config...xe.dll
windows10-2004-x64
OBS/Config...ys.dll
windows7-x64
1OBS/Config...ys.dll
windows10-2004-x64
1OBS/Config...32.dll
windows7-x64
1OBS/Config...32.dll
windows10-2004-x64
1OBS/Config...32.dll
windows7-x64
1OBS/Config...32.dll
windows10-2004-x64
OBS/Config...ms.dll
windows7-x64
OBS/Config...ms.dll
windows10-2004-x64
OBS/Config...ng.dll
windows7-x64
1OBS/Config...ng.dll
windows10-2004-x64
OBS/Config...sg.dll
windows7-x64
OBS/Config...sg.dll
windows10-2004-x64
1OBS/Config...vs.dll
windows7-x64
1OBS/Config...vs.dll
windows10-2004-x64
1OBS/Config...ml.dll
windows7-x64
1OBS/Config...ml.dll
windows10-2004-x64
OBS/Config...lt.dll
windows7-x64
1OBS/Config...lt.dll
windows10-2004-x64
1OBS/Config...xe.dll
windows7-x64
1OBS/Config...xe.dll
windows10-2004-x64
OBS/Config...xe.dll
windows7-x64
1OBS/Config...xe.dll
windows10-2004-x64
1OBS/Config...ys.dll
windows7-x64
1OBS/Config...ys.dll
windows10-2004-x64
1Analysis
-
max time network
513s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
16-01-2023 12:49
Static task
static1
Behavioral task
behavioral1
Sample
OBS/Configuration/About/UserDeviceRegistration.Ngc.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral2
Sample
OBS/Configuration/About/UserDeviceRegistration.Ngc.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
OBS/Configuration/About/UserLanguageProfileCallback.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral4
Sample
OBS/Configuration/About/UserLanguageProfileCallback.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
OBS/Configuration/About/UserMgrProxy.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral6
Sample
OBS/Configuration/About/UserMgrProxy.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
OBS/Configuration/About/cs-CZ/WWAHost.exe.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral8
Sample
OBS/Configuration/About/cs-CZ/WWAHost.exe.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
OBS/Configuration/About/cs-CZ/cdosys.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral10
Sample
OBS/Configuration/About/cs-CZ/cdosys.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
OBS/Configuration/About/cs-CZ/comctl32.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral12
Sample
OBS/Configuration/About/cs-CZ/comctl32.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
OBS/Configuration/About/cs-CZ/comdlg32.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral14
Sample
OBS/Configuration/About/cs-CZ/comdlg32.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
OBS/Configuration/About/cs-CZ/fms.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral16
Sample
OBS/Configuration/About/cs-CZ/fms.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
OBS/Configuration/About/cs-CZ/mlang.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral18
Sample
OBS/Configuration/About/cs-CZ/mlang.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
OBS/Configuration/About/cs-CZ/msimsg.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral20
Sample
OBS/Configuration/About/cs-CZ/msimsg.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
OBS/Configuration/About/cs-CZ/msprivs.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral22
Sample
OBS/Configuration/About/cs-CZ/msprivs.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
OBS/Configuration/About/cs-CZ/windows.ui.xaml.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral24
Sample
OBS/Configuration/About/cs-CZ/windows.ui.xaml.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
OBS/Configuration/About/cs-CZ/xpsfilt.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral26
Sample
OBS/Configuration/About/cs-CZ/xpsfilt.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
OBS/Configuration/About/cs-CZ/xpsrchvw.exe.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral28
Sample
OBS/Configuration/About/cs-CZ/xpsrchvw.exe.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
OBS/Configuration/About/da-DK/WWAHost.exe.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral30
Sample
OBS/Configuration/About/da-DK/WWAHost.exe.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
OBS/Configuration/About/da-DK/cdosys.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral32
Sample
OBS/Configuration/About/da-DK/cdosys.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Errors
General
-
Target
OBS/Configuration/About/cs-CZ/fms.dll
-
Size
14KB
-
MD5
6c9ef9be12d3dff8516a977039d38f42
-
SHA1
350c29c78f13f112448f00a0773a4357d20da632
-
SHA256
d900b2ee80feec5175d004a3426deebdc66fedb352006f673d257f23521c6636
-
SHA512
f8e7f5f8e0855d43b090d959d3c558d2a5e316cf883033bb81ec8ed7738be2368ae5d38bc56a9045373ab7072d840bf417eff2274eab3a662a5da721021ef482
-
SSDEEP
384:mrJ9xN7zIy001KnWj9ztiGikifwxMpV+gWKK:8xyK
Malware Config
Signatures
-
Unexpected DNS network traffic destination 2 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes:
description ioc Destination IP 162.159.36.2 Destination IP 162.159.36.2