Overview
overview
7Static
static
OBS/Config...gc.dll
windows7-x64
OBS/Config...gc.dll
windows10-2004-x64
1OBS/Config...ck.dll
windows7-x64
OBS/Config...ck.dll
windows10-2004-x64
OBS/Config...xy.dll
windows7-x64
1OBS/Config...xy.dll
windows10-2004-x64
1OBS/Config...xe.dll
windows7-x64
OBS/Config...xe.dll
windows10-2004-x64
OBS/Config...ys.dll
windows7-x64
1OBS/Config...ys.dll
windows10-2004-x64
1OBS/Config...32.dll
windows7-x64
1OBS/Config...32.dll
windows10-2004-x64
1OBS/Config...32.dll
windows7-x64
1OBS/Config...32.dll
windows10-2004-x64
1OBS/Config...ms.dll
windows7-x64
1OBS/Config...ms.dll
windows10-2004-x64
OBS/Config...ng.dll
windows7-x64
OBS/Config...ng.dll
windows10-2004-x64
OBS/Config...sg.dll
windows7-x64
1OBS/Config...sg.dll
windows10-2004-x64
OBS/Config...vs.dll
windows7-x64
OBS/Config...vs.dll
windows10-2004-x64
1OBS/Config...ml.dll
windows7-x64
1OBS/Config...ml.dll
windows10-2004-x64
1OBS/Config...lt.dll
windows7-x64
OBS/Config...lt.dll
windows10-2004-x64
1OBS/Config...xe.dll
windows7-x64
1OBS/Config...xe.dll
windows10-2004-x64
1OBS/Config...xe.dll
windows7-x64
1OBS/Config...xe.dll
windows10-2004-x64
1OBS/Config...ys.dll
windows7-x64
1OBS/Config...ys.dll
windows10-2004-x64
1Analysis
-
max time network
581s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
16-01-2023 13:01
Static task
static1
Behavioral task
behavioral1
Sample
OBS/Configuration/About/UserDeviceRegistration.Ngc.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral2
Sample
OBS/Configuration/About/UserDeviceRegistration.Ngc.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
OBS/Configuration/About/UserLanguageProfileCallback.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral4
Sample
OBS/Configuration/About/UserLanguageProfileCallback.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
OBS/Configuration/About/UserMgrProxy.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral6
Sample
OBS/Configuration/About/UserMgrProxy.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
OBS/Configuration/About/cs-CZ/WWAHost.exe.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral8
Sample
OBS/Configuration/About/cs-CZ/WWAHost.exe.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
OBS/Configuration/About/cs-CZ/cdosys.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral10
Sample
OBS/Configuration/About/cs-CZ/cdosys.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
OBS/Configuration/About/cs-CZ/comctl32.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral12
Sample
OBS/Configuration/About/cs-CZ/comctl32.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
OBS/Configuration/About/cs-CZ/comdlg32.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral14
Sample
OBS/Configuration/About/cs-CZ/comdlg32.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
OBS/Configuration/About/cs-CZ/fms.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral16
Sample
OBS/Configuration/About/cs-CZ/fms.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
OBS/Configuration/About/cs-CZ/mlang.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral18
Sample
OBS/Configuration/About/cs-CZ/mlang.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
OBS/Configuration/About/cs-CZ/msimsg.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral20
Sample
OBS/Configuration/About/cs-CZ/msimsg.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
OBS/Configuration/About/cs-CZ/msprivs.dll
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral22
Sample
OBS/Configuration/About/cs-CZ/msprivs.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
OBS/Configuration/About/cs-CZ/windows.ui.xaml.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral24
Sample
OBS/Configuration/About/cs-CZ/windows.ui.xaml.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
OBS/Configuration/About/cs-CZ/xpsfilt.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral26
Sample
OBS/Configuration/About/cs-CZ/xpsfilt.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
OBS/Configuration/About/cs-CZ/xpsrchvw.exe.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral28
Sample
OBS/Configuration/About/cs-CZ/xpsrchvw.exe.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
OBS/Configuration/About/da-DK/WWAHost.exe.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral30
Sample
OBS/Configuration/About/da-DK/WWAHost.exe.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
OBS/Configuration/About/da-DK/cdosys.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral32
Sample
OBS/Configuration/About/da-DK/cdosys.dll
Resource
win10v2004-20221111-en
windows10-2004-x64
Errors
General
-
Target
OBS/Configuration/About/cs-CZ/mlang.dll
-
Size
18KB
-
MD5
2bb79c98a1aa4279759cdeee4429af15
-
SHA1
e66dfadcfdcd64c9c4c1669c7f39986154f08336
-
SHA256
a543df3c26cb619ab2eba72f7ba52a1168743517481ef14708e16be30686b411
-
SHA512
77e71d30b53a59d007d3d96b910e0c63d4f9ec644027399789261253aad789bfb0f7446e4b5f36c137a1bbcec65ad6d5477b89df023ff3f64b0a323b0c731a67
-
SSDEEP
384:shPjqMeu1ExXKhGadEG62SNAMpL3O9uC321WnZ:gLquWKhQd4Z
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes:
description ioc Destination IP 162.159.36.2