Overview

overview

7

Static

static

OBS/Config...gc.dll

windows7-x64

1

OBS/Config...gc.dll

windows10-2004-x64

1

OBS/Config...ck.dll

windows7-x64

1

OBS/Config...ck.dll

windows10-2004-x64

OBS/Config...xy.dll

windows7-x64

1

OBS/Config...xy.dll

windows10-2004-x64

1

OBS/Config...xe.dll

windows7-x64

1

OBS/Config...xe.dll

windows10-2004-x64

OBS/Config...ys.dll

windows7-x64

1

OBS/Config...ys.dll

windows10-2004-x64

1

OBS/Config...32.dll

windows7-x64

1

OBS/Config...32.dll

windows10-2004-x64

1

OBS/Config...32.dll

windows7-x64

1

OBS/Config...32.dll

windows10-2004-x64

OBS/Config...ms.dll

windows7-x64

OBS/Config...ms.dll

windows10-2004-x64

OBS/Config...ng.dll

windows7-x64

1

OBS/Config...ng.dll

windows10-2004-x64

1

OBS/Config...sg.dll

windows7-x64

1

OBS/Config...sg.dll

windows10-2004-x64

1

OBS/Config...vs.dll

windows7-x64

OBS/Config...vs.dll

windows10-2004-x64

1

OBS/Config...ml.dll

windows7-x64

OBS/Config...ml.dll

windows10-2004-x64

OBS/Config...lt.dll

windows7-x64

1

OBS/Config...lt.dll

windows10-2004-x64

OBS/Config...xe.dll

windows7-x64

1

OBS/Config...xe.dll

windows10-2004-x64

OBS/Config...xe.dll

windows7-x64

OBS/Config...xe.dll

windows10-2004-x64

1

OBS/Config...ys.dll

windows7-x64

1

OBS/Config...ys.dll

windows10-2004-x64

Analysis

  • max time network
    298s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-01-2023 12:53

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Reading agent response: read tcp 10.127.0.1:53292->10.127.0.14:8000: read: connection timed out
Report Analysis Logs

General

  • Target

    OBS/Configuration/About/cs-CZ/WWAHost.exe.dll

  • Size

    21KB

  • MD5

    ac29d148d51f0ee691d470da3101a0db

  • SHA1

    cbf27ce221f7555484690b5e35d9c681ac234877

  • SHA256

    8a5dfc78afa6ca069847372931c496749cf67a0237af0c3a652fb1cbea03b5e4

  • SHA512

    52ffa95f9ed1a8cb21ead52cd231cc4e0e0fb4290993afcd5dfedbfd7befe908c7ce1af6b60c90b562afcf766dc9e918a779b6154dcf67325e591d8337680166

  • SSDEEP

    384:ii+fXuHfk62uqbW11MQQp291upxoD7zS+UShOn59oIfkZpbI5QibOdNm6JWxf:iiEs1VQYzUSGcgf

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 2 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads