Overview
overview
10Static
static
TA579_2022...sl.dll
windows7-x64
1TA579_2022...sl.dll
windows10-2004-x64
1TA579_2022...fo.dll
windows7-x64
1TA579_2022...fo.dll
windows10-2004-x64
3TA579_2022...dle.py
windows7-x64
3TA579_2022...dle.py
windows10-2004-x64
3TA579_2022...on.exe
windows7-x64
1TA579_2022...on.exe
windows10-2004-x64
1TA579_2022...n3.dll
windows7-x64
1TA579_2022...n3.dll
windows10-2004-x64
3TA579_2022...10.dll
windows7-x64
1TA579_2022...10.dll
windows10-2004-x64
3TA579_2022...nw.exe
windows7-x64
1TA579_2022...nw.exe
windows10-2004-x64
1TA579_2022...ts.lnk
windows7-x64
3TA579_2022...ts.lnk
windows10-2004-x64
10Resubmissions
18-01-2023 14:25
230118-rrsavsag38 10Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
18-01-2023 14:25
Static task
static1
Behavioral task
behavioral1
Sample
TA579_20220117/_ssl.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
TA579_20220117/_ssl.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
TA579_20220117/_zoneinfo.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
TA579_20220117/_zoneinfo.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
TA579_20220117/cradle.py
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
TA579_20220117/cradle.py
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
TA579_20220117/python.exe
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
TA579_20220117/python.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
TA579_20220117/python3.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
TA579_20220117/python3.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
TA579_20220117/python310.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
TA579_20220117/python310.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
TA579_20220117/pythonw.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
TA579_20220117/pythonw.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
TA579_20220117/required documents.lnk
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
TA579_20220117/required documents.lnk
Resource
win10v2004-20220812-en
General
-
Target
TA579_20220117/python3.dll
-
Size
63KB
-
MD5
e0ca371cb1e69e13909bfbd2a7afc60e
-
SHA1
955c31d85770ae78e929161d6b73a54065187f9e
-
SHA256
abb50921ef463263acd7e9be19862089045074ea332421d82e765c5f2163e78a
-
SHA512
dd5a980ba72e4e7be81b927d140e408ad06c7be51b4f509737faee5514e85a42d47518213da1c3e77c25f9bd2eb2109fca173d73d710ff57e6a88a2ff971d0b4
-
SSDEEP
768:5n8LeBLeeFtp5V1BfO2yvSk70QZF1nEyjnskQkr/RFB1qucwdBeCw0myou6ZwJq2:5nwewnvtjnsfwL5I4Q0h7SyD0PxW
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2764 4624 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\TA579_20220117\python3.dll,#11⤵PID:4624
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4624 -s 3802⤵
- Program crash
PID:2764
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 188 -p 4624 -ip 46241⤵PID:3536