Overview
overview
10Static
static
7Setup.exe
windows7-x64
10Setup.exe
windows10-2004-x64
10dbghelp.dll
windows7-x64
1dbghelp.dll
windows10-2004-x64
1dll/DLL_An...ne.dll
windows7-x64
1dll/DLL_An...ne.dll
windows10-2004-x64
1dll/DLL_An...ht.dll
windows7-x64
1dll/DLL_An...ht.dll
windows10-2004-x64
1dll/DLL_Mo...er.dll
windows7-x64
1dll/DLL_Mo...er.dll
windows10-2004-x64
1dll/DLL_Mo...ok.dll
windows7-x64
1dll/DLL_Mo...ok.dll
windows10-2004-x64
1dll/DLL_PenSuit.dll
windows7-x64
1dll/DLL_PenSuit.dll
windows10-2004-x64
1dll/DLL_Sc...ol.dll
windows7-x64
1dll/DLL_Sc...ol.dll
windows10-2004-x64
1dll/DLL_Wheel4D.dll
windows7-x64
1dll/DLL_Wheel4D.dll
windows10-2004-x64
1dll/DLL_Zo...ol.dll
windows7-x64
1dll/DLL_Zo...ol.dll
windows10-2004-x64
1iconengine...on.dll
windows7-x64
1iconengine...on.dll
windows10-2004-x64
1Analysis
-
max time kernel
53s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
15-02-2023 21:27
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
dbghelp.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
dbghelp.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
dll/DLL_AnalyzeGesturesInOne.dll
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
dll/DLL_AnalyzeGesturesInOne.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
dll/DLL_AnalyzeGesturesInRight.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
dll/DLL_AnalyzeGesturesInRight.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
dll/DLL_MouseDeviceManager.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
dll/DLL_MouseDeviceManager.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
dll/DLL_MouseEventHook.dll
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
dll/DLL_MouseEventHook.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
dll/DLL_PenSuit.dll
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
dll/DLL_PenSuit.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
dll/DLL_ScrollbarControl.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
dll/DLL_ScrollbarControl.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
dll/DLL_Wheel4D.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
dll/DLL_Wheel4D.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
dll/DLL_ZoomControl.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
dll/DLL_ZoomControl.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
iconengines/qsvgicon.dll
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
iconengines/qsvgicon.dll
Resource
win10v2004-20221111-en
General
-
Target
dll/DLL_MouseDeviceManager.dll
-
Size
86KB
-
MD5
d9e11a2ab50b4ff6ad95eee5fed3eb48
-
SHA1
30e177daebe525f8e5d9da07c890a6e32fe5840f
-
SHA256
a48d804c0732591b4c891ac2a7b32d0d627602b950fec30143a5dafd5aee103b
-
SHA512
93a5977b6fb1ce8b59ccaa9307ea7271b98168b8269a2b21d41a6de2d7826934c1f2aa83a72940d4feca7e2277419d4916a5d3a248e7134d915f756d8926d140
-
SSDEEP
768:rpdSwYh8NE7UOBBV5pTWfIitVFSPl3naQhHNe6c/6+twjEniABlXS7Vr9EDbDznF:O5pFvoIib6H46cRnfBir0DzeVC/P0
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 4800 wrote to memory of 408 4800 rundll32.exe rundll32.exe PID 4800 wrote to memory of 408 4800 rundll32.exe rundll32.exe PID 4800 wrote to memory of 408 4800 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dll\DLL_MouseDeviceManager.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dll\DLL_MouseDeviceManager.dll,#12⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/408-132-0x0000000000000000-mapping.dmp