Overview
overview
10Static
static
1Setup.exe
windows7-x64
1Setup.exe
windows10-2004-x64
10ccme_ecc.dll
windows7-x64
1ccme_ecc.dll
windows10-2004-x64
1icucnv67.msi
windows7-x64
8icucnv67.msi
windows10-2004-x64
8icudt67.msi
windows7-x64
8icudt67.msi
windows10-2004-x64
8vcomp140.dll
windows7-x64
1vcomp140.dll
windows10-2004-x64
3vcruntime140.dll
windows7-x64
3vcruntime140.dll
windows10-2004-x64
3x86/ACE.dll
windows7-x64
1x86/ACE.dll
windows10-2004-x64
1x86/AGM.dll
windows7-x64
1x86/AGM.dll
windows10-2004-x64
1x86/AIDE.dll
windows7-x64
3x86/AIDE.dll
windows10-2004-x64
3x86/Acroba...OL.dll
windows7-x64
1x86/Acroba...OL.dll
windows10-2004-x64
1x86/Acroba...es.xml
windows7-x64
1x86/Acroba...es.xml
windows10-2004-x64
1x86/Acroba...32.dll
windows7-x64
3x86/Acroba...32.dll
windows10-2004-x64
3x86/AdobeXMP.dll
windows7-x64
1x86/AdobeXMP.dll
windows10-2004-x64
3x86/BIB.dll
windows7-x64
1x86/BIB.dll
windows10-2004-x64
1x86/BIBUtils.dll
windows7-x64
1x86/BIBUtils.dll
windows10-2004-x64
1x86/CoolType.dll
windows7-x64
3x86/CoolType.dll
windows10-2004-x64
3Analysis
-
max time kernel
40s -
max time network
73s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21-02-2023 11:28
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
ccme_ecc.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
ccme_ecc.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
icucnv67.msi
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
icucnv67.msi
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
icudt67.msi
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
icudt67.msi
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
vcomp140.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
vcomp140.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
vcruntime140.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
vcruntime140.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
x86/ACE.dll
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
x86/ACE.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
x86/AGM.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
x86/AGM.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
x86/AIDE.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
x86/AIDE.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
x86/Acrobat/Acrobat32OL.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
x86/Acrobat/Acrobat32OL.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
x86/Acrobat/Adobe.Acrobat.Dependencies.xml
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
x86/Acrobat/Adobe.Acrobat.Dependencies.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
x86/Acrobat/Onix32.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
x86/Acrobat/Onix32.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
x86/AdobeXMP.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
x86/AdobeXMP.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
x86/BIB.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
x86/BIB.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
x86/BIBUtils.dll
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
x86/BIBUtils.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
x86/CoolType.dll
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
x86/CoolType.dll
Resource
win10v2004-20230220-en
General
-
Target
x86/BIBUtils.dll
-
Size
170KB
-
MD5
79622b56347c1fd44b74bd4ea74cb813
-
SHA1
51c1e13a4b5aad657c570149c529dd4963adf77a
-
SHA256
0f2b3d012a9abe420bc36c62847bba6ca4478ceebc018bad2b19f22d481fcc10
-
SHA512
ebc329e0d1d869107043e5b0a0e05d4322fa0a2bbc2c30411d51ce1b4b33778ee94f82ad072cc8cf75222f488e52bf52dfb7481edfdef3e39fd58259685ad195
-
SSDEEP
3072:0VMWnX3e6TCL2ssOGpibdy1ZLKDZW7TPtAlgeoVA/sis/zquLtyQh1g:0JnHeKk2s03q0nh
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 4172 wrote to memory of 4652 4172 rundll32.exe rundll32.exe PID 4172 wrote to memory of 4652 4172 rundll32.exe rundll32.exe PID 4172 wrote to memory of 4652 4172 rundll32.exe rundll32.exe