Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
12/04/2023, 18:16
Static task
static1
Behavioral task
behavioral1
Sample
SGDBoop.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SGDBoop.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
iup.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
iup.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
libcurl.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
libcurl.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
zlib1.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
zlib1.dll
Resource
win10v2004-20230220-en
General
-
Target
libcurl.dll
-
Size
500KB
-
MD5
fc8385b1320385df730a7374e31061cb
-
SHA1
a94fb0ff66de93ffcbeff152bc08ec43c9a20c22
-
SHA256
823abce0909c26d2f1163c1421c83c69cb0854ef572ffd0864a2f673431d98b8
-
SHA512
b27c94c431cd97589adc07d8e25f3030c076a46085a7f3938ef2b1f4e0225515cb5292efe6f418b6d546ece28b5afbffd07790cbba11fde4b80fcbebb803e09e
-
SSDEEP
6144:SJWryMEih5Rmem9CPnvY31Yw5NvLaIRTTm4v9CtCvOoQor/MQ0G0mhRQ+IWWLbin:SxMEiVnsNOIRTTm4YtCj/3FhVwbc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1880 1400 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libcurl.dll,#11⤵PID:1400
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1400 -s 3882⤵
- Program crash
PID:1880
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 1400 -ip 14001⤵PID:1484