Overview
overview
7Static
static
OBS/Config...gc.dll
windows7-x64
OBS/Config...gc.dll
windows10-2004-x64
1OBS/Config...ck.dll
windows7-x64
1OBS/Config...ck.dll
windows10-2004-x64
OBS/Config...xy.dll
windows7-x64
1OBS/Config...xy.dll
windows10-2004-x64
1OBS/Config...xe.dll
windows7-x64
1OBS/Config...xe.dll
windows10-2004-x64
1OBS/Config...ys.dll
windows7-x64
1OBS/Config...ys.dll
windows10-2004-x64
1OBS/Config...32.dll
windows7-x64
OBS/Config...32.dll
windows10-2004-x64
1OBS/Config...32.dll
windows7-x64
OBS/Config...32.dll
windows10-2004-x64
OBS/Config...ms.dll
windows7-x64
1OBS/Config...ms.dll
windows10-2004-x64
OBS/Config...ng.dll
windows7-x64
1OBS/Config...ng.dll
windows10-2004-x64
OBS/Config...sg.dll
windows7-x64
OBS/Config...sg.dll
windows10-2004-x64
1OBS/Config...vs.dll
windows7-x64
1OBS/Config...vs.dll
windows10-2004-x64
1OBS/Config...ml.dll
windows7-x64
1OBS/Config...ml.dll
windows10-2004-x64
1OBS/Config...lt.dll
windows7-x64
OBS/Config...lt.dll
windows10-2004-x64
OBS/Config...xe.dll
windows7-x64
OBS/Config...xe.dll
windows10-2004-x64
OBS/Config...xe.dll
windows7-x64
1OBS/Config...xe.dll
windows10-2004-x64
1OBS/Config...ys.dll
windows7-x64
1OBS/Config...ys.dll
windows10-2004-x64
Analysis
-
max time kernel
66s -
max time network
566s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
16-01-2023 13:25
Static task
static1
Behavioral task
behavioral1
Sample
OBS/Configuration/About/UserDeviceRegistration.Ngc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
OBS/Configuration/About/UserDeviceRegistration.Ngc.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
OBS/Configuration/About/UserLanguageProfileCallback.dll
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
OBS/Configuration/About/UserLanguageProfileCallback.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
OBS/Configuration/About/UserMgrProxy.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
OBS/Configuration/About/UserMgrProxy.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
OBS/Configuration/About/cs-CZ/WWAHost.exe.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
OBS/Configuration/About/cs-CZ/WWAHost.exe.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
OBS/Configuration/About/cs-CZ/cdosys.dll
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
OBS/Configuration/About/cs-CZ/cdosys.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
OBS/Configuration/About/cs-CZ/comctl32.dll
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
OBS/Configuration/About/cs-CZ/comctl32.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
OBS/Configuration/About/cs-CZ/comdlg32.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
OBS/Configuration/About/cs-CZ/comdlg32.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
OBS/Configuration/About/cs-CZ/fms.dll
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
OBS/Configuration/About/cs-CZ/fms.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
OBS/Configuration/About/cs-CZ/mlang.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
OBS/Configuration/About/cs-CZ/mlang.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
OBS/Configuration/About/cs-CZ/msimsg.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
OBS/Configuration/About/cs-CZ/msimsg.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
OBS/Configuration/About/cs-CZ/msprivs.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
OBS/Configuration/About/cs-CZ/msprivs.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
OBS/Configuration/About/cs-CZ/windows.ui.xaml.dll
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
OBS/Configuration/About/cs-CZ/windows.ui.xaml.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
OBS/Configuration/About/cs-CZ/xpsfilt.dll
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
OBS/Configuration/About/cs-CZ/xpsfilt.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
OBS/Configuration/About/cs-CZ/xpsrchvw.exe.dll
Resource
win7-20221111-en
Behavioral task
behavioral28
Sample
OBS/Configuration/About/cs-CZ/xpsrchvw.exe.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
OBS/Configuration/About/da-DK/WWAHost.exe.dll
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
OBS/Configuration/About/da-DK/WWAHost.exe.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
OBS/Configuration/About/da-DK/cdosys.dll
Resource
win7-20220901-en
Behavioral task
behavioral32
Sample
OBS/Configuration/About/da-DK/cdosys.dll
Resource
win10v2004-20221111-en
General
-
Target
OBS/Configuration/About/cs-CZ/windows.ui.xaml.dll
-
Size
16KB
-
MD5
60d121f438f6e39a1b4a730305732aa6
-
SHA1
fce026e06ce0f9a1c370d9cfb6c97c65974b453a
-
SHA256
2a9f8ab072e55791920c37b9fcd8a9bcffe85a0f1920c5d956fda4403650efa8
-
SHA512
0cc3016c3261b242111f7bc5c2ab806c429938cd8acd4a22fdf9e2842dac6de3ba262f00a6b76b2328061f62afb36b93fc90f4531ab4c444a17dc6f4db5927f4
-
SSDEEP
192:rwFmH0txornhVvB+utxmORGcfI8lNVbizcXV+4ZBRywt2kgp5P6E+Xe69wXW13b:imux4nvB+utxmuhfIw0cF+4jlHuMUW1L
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\OBS\Configuration\About\cs-CZ\windows.ui.xaml.dll,#11⤵PID:4780
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\OBS\Configuration\About\cs-CZ\windows.ui.xaml.dll,#11⤵PID:4780