Overview
overview
10Static
static
AudioCapture.dll
windows7-x64
1AudioCapture.dll
windows10-2004-x64
1HTCTL32.dll
windows7-x64
1HTCTL32.dll
windows10-2004-x64
3PCICHEK.dll
windows7-x64
1PCICHEK.dll
windows10-2004-x64
1PCICL32.dll
windows7-x64
1PCICL32.dll
windows10-2004-x64
1TCCTL32.dll
windows7-x64
1TCCTL32.dll
windows10-2004-x64
1client32.exe
windows7-x64
10client32.exe
windows10-2004-x64
10client32.ini
windows7-x64
1client32.ini
windows10-2004-x64
1msvcr100.dll
windows7-x64
3msvcr100.dll
windows10-2004-x64
3pcicapi.dll
windows7-x64
1pcicapi.dll
windows10-2004-x64
1remcmdstub.exe
windows7-x64
1remcmdstub.exe
windows10-2004-x64
1Analysis
-
max time kernel
91s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
31-01-2023 10:43
Static task
static1
Behavioral task
behavioral1
Sample
AudioCapture.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
AudioCapture.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
HTCTL32.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
HTCTL32.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
PCICHEK.dll
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
PCICHEK.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
PCICL32.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
PCICL32.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
TCCTL32.dll
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
TCCTL32.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
client32.exe
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
client32.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
client32.ini
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
client32.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
msvcr100.dll
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
msvcr100.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
pcicapi.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
pcicapi.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
remcmdstub.exe
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
remcmdstub.exe
Resource
win10v2004-20220812-en
General
-
Target
client32.ini
-
Size
914B
-
MD5
fd8286ae0a78720863b527ef40afa2d2
-
SHA1
cde55878b3f1f296548d2548a2f3cc0170afa67e
-
SHA256
b3c4963e4a5dbe7af6ad552526f58eff57c3f3868fde42416501643c95e938c0
-
SHA512
a75c53132a825635491fa9f5e5bbdc1201f505d4caf78ab56eedacb1cd9d2358af27c0f48ae548fe261dc26f4b68960abf8d950d26c747290c6cbd44297670c6
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 4644 NOTEPAD.EXE