Overview
overview
10Static
static
10SS Tools SafePvP.rar
windows10-1703-x64
3Srenshare ...os.lnk
windows10-1703-x64
3Srenshare ...mp.lnk
windows10-1703-x64
3Srenshare ...SS.exe
windows10-1703-x64
3Srenshare ...up.exe
windows10-1703-x64
7Srenshare ...s-.url
windows10-1703-x64
1Srenshare ...1).exe
windows10-1703-x64
7Srenshare ...ew.exe
windows10-1703-x64
6Srenshare ...in.exe
windows10-1703-x64
5Srenshare ... 2.lnk
windows10-1703-x64
3Srenshare ...er.exe
windows10-1703-x64
9Srenshare ...ew.exe
windows10-1703-x64
6Srenshare ...ew.exe
windows10-1703-x64
9Srenshare ....5.exe
windows10-1703-x64
4Analysis
-
max time kernel
82s -
max time network
86s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
05-02-2023 01:39
Behavioral task
behavioral1
Sample
SS Tools SafePvP.rar
Resource
win10-20220901-en
Behavioral task
behavioral2
Sample
Srenshare tool/Atajos/Iconos.lnk
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
Srenshare tool/Atajos/Temp.lnk
Resource
win10-20220812-en
Behavioral task
behavioral4
Sample
Srenshare tool/LandSS.exe
Resource
win10-20220812-en
Behavioral task
behavioral5
Sample
Srenshare tool/Tools/Everything-1.4.1.935.x86-Setup.exe
Resource
win10-20220901-en
Behavioral task
behavioral6
Sample
Srenshare tool/Tools/Jitter Click Training-How fast can you click in 10 seconds-.url
Resource
win10-20220812-en
Behavioral task
behavioral7
Sample
Srenshare tool/Tools/Kangaroo (1).exe
Resource
win10-20220812-en
Behavioral task
behavioral8
Sample
Srenshare tool/Tools/LastActivityView.exe
Resource
win10-20220812-en
Behavioral task
behavioral9
Sample
Srenshare tool/Tools/Paladin.exe
Resource
win10-20220901-en
Behavioral task
behavioral10
Sample
Srenshare tool/Tools/Process Hacker 2.lnk
Resource
win10-20220812-en
Behavioral task
behavioral11
Sample
Srenshare tool/Tools/RegScanner.exe
Resource
win10-20220812-en
Behavioral task
behavioral12
Sample
Srenshare tool/Tools/USBDeview.exe
Resource
win10-20220901-en
Behavioral task
behavioral13
Sample
Srenshare tool/Tools/UserAssistView.exe
Resource
win10-20220812-en
Behavioral task
behavioral14
Sample
Srenshare tool/Tools/luyten-0.4.5.exe
Resource
win10-20220812-en
General
-
Target
Srenshare tool/Tools/RegScanner.exe
-
Size
59KB
-
MD5
2e998efadda38ea838d22354d7f335b9
-
SHA1
bc2cc88ba637eb84a70eb79a710313926f9056c1
-
SHA256
a4fdda53e3bcd4e369baec3436e06acd6c210b8de950f439cf425db37c66e897
-
SHA512
935757530f51e8d79da06070140e4fdf950be9411ca401333d3cdb15485d7ebaf61c577c9d467c22b78b18b8d0fa22d66d438ca3ba3630f8d4af448fa2eff75e
-
SSDEEP
768:82dfLRvCbvubjBpiZrH6ENDk9fWcofmDybxH0mSJIVFh5rbipGeiWwQ:82NRv2aniZrNBVcof8qxH0RID7bipG6v
Malware Config
Signatures
-
Nirsoft 1 IoCs
Processes:
resource yara_rule behavioral11/memory/2900-159-0x0000000000400000-0x000000000041D000-memory.dmp Nirsoft -
Processes:
resource yara_rule behavioral11/memory/2900-122-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral11/memory/2900-159-0x0000000000400000-0x000000000041D000-memory.dmp upx