Overview

overview

6

Static

static

happytime-...er.exe

windows10-2004-x64

1

happytime-...ig.xml

windows10-2004-x64

1

happytime-...er.exe

windows10-2004-x64

3

happytime-...58.dll

windows10-2004-x64

3

happytime-...58.dll

windows10-2004-x64

1

happytime-...56.dll

windows10-2004-x64

3

happytime-...ig.xml

windows10-2004-x64

1

happytime-..._1.dll

windows10-2004-x64

3

happytime-..._1.dll

windows10-2004-x64

1

happytime-...40.dll

windows10-2004-x64

3

happytime-...me.txt

windows10-2004-x64

1

happytime-...rt.dll

windows10-2004-x64

3

happytime-...ssl.ca

windows10-2004-x64

3

happytime-...sl.key

windows10-2004-x64

3

happytime-...-3.dll

windows10-2004-x64

1

happytime-...-5.dll

windows10-2004-x64

3

happytime-...st.mp4

windows10-2004-x64

6

happytime-...al.pdf

windows10-2004-x64

1

happytime-...40.dll

windows10-2004-x64

3

happytime-...pi.dll

windows10-2004-x64

3

happytime-...n.html

windows10-2004-x64

1

happytime-..._1.dll

windows10-2004-x64

3

happytime-..._1.dll

windows10-2004-x64

1

happytime-...me.txt

windows10-2004-x64

1

happytime-...me.bat

windows10-2004-x64

1

happytime-...ot.jpg

windows10-2004-x64

3

happytime-...ssl.ca

windows10-2004-x64

3

happytime-...sl.key

windows10-2004-x64

3

happytime-...al.pdf

windows10-2004-x64

1

happytime-...40.dll

windows10-2004-x64

3

happytime-...pi.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    124s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-01-2023 03:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    happytime-onvif-server/happytime-rtsp-server/RtspServer.exe

  • Size

    421KB

  • MD5

    6407f4bf0151d9e2c37f269813184166

  • SHA1

    691ecb58955ffe5d048afecd4794d6fa7464b361

  • SHA256

    f93223dbe6936238f7b749495612110f790fdb1553731a56544ea551ca313ac4

  • SHA512

    dd97fcefaacb11dc0697b80da17577d6e138d595086b26875a6050084a5f172dd403cdb7252f5714eea0cb7f8f021b8230ac0aa9de53d9c848fd8c125a18c215

  • SSDEEP

    12288:vn3d3BPo4vYtjDGe/EqtHm6/oXCD4rI6Z:vN3BPoQKieNth2

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\happytime-onvif-server\happytime-rtsp-server\RtspServer.exe
    "C:\Users\Admin\AppData\Local\Temp\happytime-onvif-server\happytime-rtsp-server\RtspServer.exe"
    1⤵
      PID:1224
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 456 -p 3636 -ip 3636
      1⤵
        PID:2056
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3636 -s 840
        1⤵
        • Program crash
        PID:4132

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads