Overview
overview
10Static
static
7Setup.exe
windows7-x64
10Setup.exe
windows10-2004-x64
10dbghelp.dll
windows7-x64
1dbghelp.dll
windows10-2004-x64
1dll/DLL_An...ne.dll
windows7-x64
1dll/DLL_An...ne.dll
windows10-2004-x64
1dll/DLL_An...ht.dll
windows7-x64
1dll/DLL_An...ht.dll
windows10-2004-x64
1dll/DLL_Mo...er.dll
windows7-x64
1dll/DLL_Mo...er.dll
windows10-2004-x64
1dll/DLL_Mo...ok.dll
windows7-x64
1dll/DLL_Mo...ok.dll
windows10-2004-x64
1dll/DLL_PenSuit.dll
windows7-x64
1dll/DLL_PenSuit.dll
windows10-2004-x64
1dll/DLL_Sc...ol.dll
windows7-x64
1dll/DLL_Sc...ol.dll
windows10-2004-x64
1dll/DLL_Wheel4D.dll
windows7-x64
1dll/DLL_Wheel4D.dll
windows10-2004-x64
1dll/DLL_Zo...ol.dll
windows7-x64
1dll/DLL_Zo...ol.dll
windows10-2004-x64
1iconengine...on.dll
windows7-x64
1iconengine...on.dll
windows10-2004-x64
1Analysis
-
max time kernel
128s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
15-02-2023 21:27
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
dbghelp.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
dbghelp.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
dll/DLL_AnalyzeGesturesInOne.dll
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
dll/DLL_AnalyzeGesturesInOne.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
dll/DLL_AnalyzeGesturesInRight.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
dll/DLL_AnalyzeGesturesInRight.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
dll/DLL_MouseDeviceManager.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
dll/DLL_MouseDeviceManager.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
dll/DLL_MouseEventHook.dll
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
dll/DLL_MouseEventHook.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
dll/DLL_PenSuit.dll
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
dll/DLL_PenSuit.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
dll/DLL_ScrollbarControl.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
dll/DLL_ScrollbarControl.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
dll/DLL_Wheel4D.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
dll/DLL_Wheel4D.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
dll/DLL_ZoomControl.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
dll/DLL_ZoomControl.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
iconengines/qsvgicon.dll
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
iconengines/qsvgicon.dll
Resource
win10v2004-20221111-en
General
-
Target
dll/DLL_AnalyzeGesturesInRight.dll
-
Size
62KB
-
MD5
03890a9faa8613f47ef0a1932f1a875d
-
SHA1
e8ec231284c43a93c94e8750cffa551a66d9c276
-
SHA256
52d5e0a454325462c724038311462bb499096b037560b657b8c02870b929473c
-
SHA512
ecac97cb27de0495a62701e5498a8c67886336b32d03be4c97a4c00083b443780871a5e101917b352c313a37118059f011eda880eaadcb686d9a9d3a4bece112
-
SSDEEP
768:2+p3H9Jxq7To3/khDOARbhMEBWZIcBEnbRwkXGnTED8kKdmRZADvwD1:2+JHePaARtJnFw3XkKdmR6
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 4744 wrote to memory of 4856 4744 rundll32.exe rundll32.exe PID 4744 wrote to memory of 4856 4744 rundll32.exe rundll32.exe PID 4744 wrote to memory of 4856 4744 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dll\DLL_AnalyzeGesturesInRight.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dll\DLL_AnalyzeGesturesInRight.dll,#12⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4856-132-0x0000000000000000-mapping.dmp