Overview
overview
10Static
static
1data/chrome_elf.dll
windows7-x64
1data/chrome_elf.dll
windows10-2004-x64
1data/d3dco...47.dll
windows7-x64
3data/d3dco...47.dll
windows10-2004-x64
1data/d9.dll
windows7-x64
5data/d9.dll
windows10-2004-x64
5data/dddd.dll
windows7-x64
5data/dddd.dll
windows10-2004-x64
5data/event...er.dll
windows7-x64
1data/event...er.dll
windows10-2004-x64
1data/libEGL.dll
windows7-x64
1data/libEGL.dll
windows10-2004-x64
1data/libGLESv2.dll
windows7-x64
3data/libGLESv2.dll
windows10-2004-x64
3data/mojo_core.dll
windows7-x64
1data/mojo_core.dll
windows10-2004-x64
1data/sfvstwrap.dll
windows7-x64
1data/sfvstwrap.dll
windows10-2004-x64
1data/so4me...ib.dll
windows7-x64
3data/so4me...ib.dll
windows10-2004-x64
3data/sonym...xp.dll
windows7-x64
1data/sonym...xp.dll
windows10-2004-x64
1data/vdlxi...64.dll
windows7-x64
3data/vdlxi...64.dll
windows10-2004-x64
3data/vk_sw...er.dll
windows7-x64
3data/vk_sw...er.dll
windows10-2004-x64
3data/vulkan-1.dll
windows7-x64
3data/vulkan-1.dll
windows10-2004-x64
3setup.exe
windows7-x64
10setup.exe
windows10-2004-x64
10Analysis
-
max time kernel
109s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
18-02-2023 03:32
Static task
static1
Behavioral task
behavioral1
Sample
data/chrome_elf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
data/chrome_elf.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
data/d3dcompiler_47.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
data/d3dcompiler_47.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
data/d9.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
data/d9.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
data/dddd.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
data/dddd.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
data/eventlog_provider.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
data/eventlog_provider.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
data/libEGL.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
data/libEGL.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
data/libGLESv2.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
data/libGLESv2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
data/mojo_core.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
data/mojo_core.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
data/sfvstwrap.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
data/sfvstwrap.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
data/so4mediainfolib.dll
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
data/so4mediainfolib.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
data/sonymvd2pro_xp.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
data/sonymvd2pro_xp.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
data/vdlxipp61_x64.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
data/vdlxipp61_x64.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
data/vk_swiftshader.dll
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
data/vk_swiftshader.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
data/vulkan-1.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
data/vulkan-1.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
setup.exe
Resource
win10v2004-20221111-en
General
-
Target
data/so4mediainfolib.dll
-
Size
5.1MB
-
MD5
cc6ca4ee5957177f2a69373b8854afac
-
SHA1
cf7042eb99b7b18ec2ac3c290f0d560506489383
-
SHA256
09db2bf8388e846efedeef1ca35bd153099ea8a71ab6b2f3432b0860e92acc76
-
SHA512
4d7f6ae74774275505f637b0dffde7e854b2d9d068b7ce2bf1e4a51836fef878f7ae6ff3b1854a6241ca95acaa853d4c072bfce9e0f0a9b230f1974442a067fb
-
SSDEEP
49152:00rQA/IyqNhMTTvenzSOrMuwf7eYZbPaqz5g1rLLnHP1PQwk1UEFDoKwG0/l2B8s:SMTTNxmrLcSI4ky/
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 448 2076 WerFault.exe 48
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\data\so4mediainfolib.dll,#11⤵PID:2076
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2076 -s 3322⤵
- Program crash
PID:448
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 412 -p 2076 -ip 20761⤵PID:4616