Overview
overview
10Static
static
10OneLaunch\...me.dll
windows7-x64
3OneLaunch\...me.dll
windows10-2004-x64
3OneLaunch\...lf.dll
windows7-x64
1OneLaunch\...lf.dll
windows10-2004-x64
1OneLaunch\...um.exe
windows7-x64
OneLaunch\...um.exe
windows10-2004-x64
OneLaunch\...47.dll
windows7-x64
3OneLaunch\...47.dll
windows10-2004-x64
3OneLaunch\...GL.dll
windows7-x64
1OneLaunch\...GL.dll
windows10-2004-x64
1OneLaunch\...v2.dll
windows7-x64
3OneLaunch\...v2.dll
windows10-2004-x64
3Analysis
-
max time kernel
962s -
max time network
970s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
21-03-2023 19:47
Behavioral task
behavioral1
Sample
OneLaunch\5.3.5\chromium\chrome.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
OneLaunch\5.3.5\chromium\chrome.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
OneLaunch\5.3.5\chromium\chrome_elf.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
OneLaunch\5.3.5\chromium\chrome_elf.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
OneLaunch\5.3.5\chromium\chromium.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
OneLaunch\5.3.5\chromium\chromium.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
OneLaunch\5.3.5\chromium\d3dcompiler_47.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
OneLaunch\5.3.5\chromium\d3dcompiler_47.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
OneLaunch\5.3.5\chromium\libEGL.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
OneLaunch\5.3.5\chromium\libEGL.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral11
Sample
OneLaunch\5.3.5\chromium\libGLESv2.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
OneLaunch\5.3.5\chromium\libGLESv2.dll
Resource
win10v2004-20230220-en
General
-
Target
OneLaunch\5.3.5\chromium\chrome.dll
-
Size
141.4MB
-
MD5
2f0436796a1b18e42f0e6a11f1871bd7
-
SHA1
ac9f075f2020eb8b82279cadd963dc8f6a62c7b6
-
SHA256
2a708dd4cc28c189968dcb3c2100b6415eef6f7d4069f5a9ac207b41164b3502
-
SHA512
806a1cb360014d61e69c67ba44a252e2bf1c2e63e5180533229165c4645ec7a7ca5451012533fdd5c96038818ceddec4fcfbd68523eca4bbabe18303f38080fc
-
SSDEEP
1572864:n5P1JKirq5A5XoVDDph3EpNEQZp2TqEH26hUhMERyG+Pd1zAAxOMgdC9yoIFItl+:h37Z7kSN45FMqHe
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3732 3644 WerFault.exe rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 2024 wrote to memory of 3644 2024 rundll32.exe rundll32.exe PID 2024 wrote to memory of 3644 2024 rundll32.exe rundll32.exe PID 2024 wrote to memory of 3644 2024 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\OneLaunch\5.3.5\chromium\chrome.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\OneLaunch\5.3.5\chromium\chrome.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3644 -s 7363⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3644 -ip 36441⤵