Overview
overview
8Static
static
Wondershar...ff.rar
windows7-x64
3Wondershar...ff.rar
windows10-2004-x64
3Wondershar...ni.txt
windows7-x64
1Wondershar...ni.txt
windows10-2004-x64
1Wondershar...ni.zip
windows7-x64
1Wondershar...ni.zip
windows10-2004-x64
1WUC v13.x ....2.zip
windows7-x64
1WUC v13.x ....2.zip
windows10-2004-x64
1ReadMe.txt
windows7-x64
1ReadMe.txt
windows10-2004-x64
1WUC v13.x ....2.exe
windows7-x64
7WUC v13.x ....2.exe
windows10-2004-x64
7Wondershar...ni.bat
windows7-x64
8Wondershar...ni.bat
windows10-2004-x64
8Wondershar...ni.exe
windows7-x64
8Wondershar...ni.exe
windows10-2004-x64
8Analysis
-
max time kernel
82s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28-01-2023 12:36
Static task
static1
Behavioral task
behavioral1
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022) by Keff.rar
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022) by Keff.rar
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022 ) by Keff/Wondershare Uni.txt
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022 ) by Keff/Wondershare Uni.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022 ) by Keff/Wondershare Uni.zip
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022 ) by Keff/Wondershare Uni.zip
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
WUC v13.x Patcher v1.2.zip
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
WUC v13.x Patcher v1.2.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
ReadMe.txt
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
ReadMe.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
WUC v13.x Patcher v1.2.exe
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
WUC v13.x Patcher v1.2.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022 ) by Keff/Wondershare Uni.bat
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022 ) by Keff/Wondershare Uni.bat
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022 ) by Keff/Wondershare Uni.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
Wondershare UniConverter 14.1.6.107 (x64) Multilingual ( 2 decembre 2022 ) by Keff/Wondershare Uni.exe
Resource
win10v2004-20221111-en
General
-
Target
WUC v13.x Patcher v1.2.exe
-
Size
845KB
-
MD5
d3be90a4767979957773651264cf12df
-
SHA1
539fd8157ad7a95e562bc8823ddfc1c473338efa
-
SHA256
0e401965392998d1866075114ce5becd70c43b1cb110ec38b5e3fe4f90de5d2b
-
SHA512
cc3f15b3cd10dde61088daee1947ea9f6d2534015dd428bb4d3c04e77729ee75b06ab5892c2b25f82970347c4258ac8d1318695800dad66161bddbeb9db14ab8
-
SSDEEP
24576:2jUSo9VvR8DaHpqXwyevV4hDWoKOH7TmpiOEwXaozYxYc:2jUSk6aHpqXC4hDWkH7TmYOA1
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
WUC v13.x Patcher v1.2.exepid process 1276 WUC v13.x Patcher v1.2.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\dup2patcher.dllFilesize
738KB
MD5be6ab398c0769a825a21a34a3f895246
SHA1b8e386081e52e016ed2f22e96120eee15e2a3833
SHA25658ccaf67a016e033f5572d4309fe0c05ad485172bca58fbd5070b3755bca1e1d
SHA512f98f383732e8859fefc7a88774b4d820d15115a233a251bafd9ae849b0fa547a2ce949708d312f6cd7e4dc465059e5c04790cdbc04594fdfde54fbf1b51cba5a
-
memory/1276-133-0x0000000074E50000-0x0000000074F21000-memory.dmpFilesize
836KB
-
memory/1276-134-0x0000000074E50000-0x0000000074F21000-memory.dmpFilesize
836KB