Overview
overview
3Static
static
1Gacha Neon...IR.dll
windows7-x64
1Gacha Neon...IR.dll
windows10-2004-x64
1Gacha Neon...ry.exe
windows7-x64
1Gacha Neon...ry.exe
windows10-2004-x64
1Gacha Neon...32.dll
windows7-x64
3Gacha Neon...32.dll
windows10-2004-x64
3Gacha Neon...64.dll
windows7-x64
3Gacha Neon...64.dll
windows10-2004-x64
3Gacha Neon...it.dll
windows7-x64
3Gacha Neon...it.dll
windows10-2004-x64
3Gacha Neon...PC.exe
windows7-x64
1Gacha Neon...PC.exe
windows10-2004-x64
1Gacha Neon...PC.swf
windows7-x64
3Gacha Neon...PC.swf
windows10-2004-x64
3Analysis
-
max time kernel
134s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16-03-2023 21:17
Static task
static1
Behavioral task
behavioral1
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Adobe AIR.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Adobe AIR.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/NPSWF32.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/NPSWF32.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/NPSWF64.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/NPSWF64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/WebKit.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/WebKit.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Gacha Neon PCversion/Gacha Neon PC.exe
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Gacha Neon PCversion/Gacha Neon PC.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
Gacha Neon PCversion/gacha_neon_PC.swf
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Gacha Neon PCversion/gacha_neon_PC.swf
Resource
win10v2004-20230220-en
General
-
Target
Gacha Neon PCversion/Adobe AIR/Versions/1.0/Resources/NPSWF64.dll
-
Size
46KB
-
MD5
71e5ea41bf9d2b3f86d926fd43296edd
-
SHA1
31613922fe87172ea569d05dcc10c0a4c7768e79
-
SHA256
a6f05dc1f9e24e79dbdc87f35b57b9a49eab03b1ac057df0bae669a60fb24e60
-
SHA512
fc1044c5a8a5b462c7db7cec051043e32f2c65a3352825ffe657d3c2c66cc6c3addc49d9a2765c506c9be9473a8f983df6b991c123f4b4dddd297ff3a7252448
-
SSDEEP
384:Ed+w6XFoRXFF7uCvpEB3DHlctUWDfKCdy7/z3ZsHLkXPnhM:E/6XFo177uCvpCzmthDfK2QoahM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3520 4460 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Gacha Neon PCversion\Adobe AIR\Versions\1.0\Resources\NPSWF64.dll",#11⤵PID:4460
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4460 -s 3842⤵
- Program crash
PID:3520
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 468 -p 4460 -ip 44601⤵PID:3372