Overview

overview

7

Static

static

OBS/Config...gc.dll

windows7-x64

OBS/Config...gc.dll

windows10-2004-x64

OBS/Config...ck.dll

windows7-x64

1

OBS/Config...ck.dll

windows10-2004-x64

OBS/Config...xy.dll

windows7-x64

1

OBS/Config...xy.dll

windows10-2004-x64

1

OBS/Config...xe.dll

windows7-x64

OBS/Config...xe.dll

windows10-2004-x64

OBS/Config...ys.dll

windows7-x64

1

OBS/Config...ys.dll

windows10-2004-x64

OBS/Config...32.dll

windows7-x64

1

OBS/Config...32.dll

windows10-2004-x64

OBS/Config...32.dll

windows7-x64

1

OBS/Config...32.dll

windows10-2004-x64

1

OBS/Config...ms.dll

windows7-x64

1

OBS/Config...ms.dll

windows10-2004-x64

OBS/Config...ng.dll

windows7-x64

1

OBS/Config...ng.dll

windows10-2004-x64

1

OBS/Config...sg.dll

windows7-x64

1

OBS/Config...sg.dll

windows10-2004-x64

OBS/Config...vs.dll

windows7-x64

OBS/Config...vs.dll

windows10-2004-x64

1

OBS/Config...ml.dll

windows7-x64

1

OBS/Config...ml.dll

windows10-2004-x64

OBS/Config...lt.dll

windows7-x64

1

OBS/Config...lt.dll

windows10-2004-x64

1

OBS/Config...xe.dll

windows7-x64

1

OBS/Config...xe.dll

windows10-2004-x64

OBS/Config...xe.dll

windows7-x64

OBS/Config...xe.dll

windows10-2004-x64

1

OBS/Config...ys.dll

windows7-x64

1

OBS/Config...ys.dll

windows10-2004-x64

1

Analysis

  • max time network
    548s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-01-2023 13:20

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Reading agent response: read tcp 10.127.0.1:32804->10.127.0.102:8000: read: connection timed out
Report Analysis Logs

General

  • Target

    OBS/Configuration/About/UserLanguageProfileCallback.dll

  • Size

    59KB

  • MD5

    2ef1eff30a933f22c58c3a292e8e7d92

  • SHA1

    d2aa9b8a3e1fc694b784ad765cdb34e99440b043

  • SHA256

    57397bb0a9f4b6f55c141b0e9f7cc360cd0d69c4b1e48e683150d04c98acefdb

  • SHA512

    80cc9cce61f3278d28ddbff287d23bf103343e5ece361f4d76ba9bcc4b5144e6679f67a9bbefe3616cf5b6e6efb4e0df2bb6dc3dd664131a7afb5ed328cb85ca

  • SSDEEP

    1536:aygogGW9CXqIxU7rWwG4NB268BHLO+zpktrwHpATBJ:KnRBlrWwG4NB26EC+zpkRwJe

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 3 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads