Overview
overview
3Static
static
1PokeStars-...47.dll
windows7-x64
3PokeStars-...47.dll
windows10-2004-x64
1PokeStars-...GL.dll
windows7-x64
1PokeStars-...GL.dll
windows10-2004-x64
1PokeStars-...v2.dll
windows7-x64
3PokeStars-...v2.dll
windows10-2004-x64
3PokeStars-....9.dll
windows7-x64
3PokeStars-....9.dll
windows10-2004-x64
3PokeStars-...on.dll
windows7-x64
3PokeStars-...on.dll
windows10-2004-x64
3PokeStars-...rs.dll
windows7-x64
1PokeStars-...rs.dll
windows10-2004-x64
1PokeStars-...on.exe
windows7-x64
1PokeStars-...on.exe
windows10-2004-x64
1PokeStars-...nw.exe
windows7-x64
1PokeStars-...nw.exe
windows10-2004-x64
1PokeStars-...ay.vbs
windows7-x64
1PokeStars-...ay.vbs
windows10-2004-x64
1PokeStars-...nc.exe
windows7-x64
1PokeStars-...nc.exe
windows10-2004-x64
1PokeStars-...ke.exe
windows7-x64
1PokeStars-...ke.exe
windows10-2004-x64
1PokeStars-...__.pyc
windows7-x64
3PokeStars-...__.pyc
windows10-2004-x64
3PokeStars-...le.pyc
windows7-x64
3PokeStars-...le.pyc
windows10-2004-x64
3PokeStars-...ss.pyc
windows7-x64
3PokeStars-...ss.pyc
windows10-2004-x64
3PokeStars-...bc.pyc
windows7-x64
3PokeStars-...bc.pyc
windows10-2004-x64
3PokeStars-...le.pyc
windows7-x64
3PokeStars-...le.pyc
windows10-2004-x64
3Analysis
-
max time kernel
91s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
15-04-2023 22:22
Static task
static1
Behavioral task
behavioral1
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/libEGL.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/libEGL.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/libGLESv2.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/libGLESv2.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/libpython3.9.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/libpython3.9.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/librenpython.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/librenpython.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/nvdrs.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/nvdrs.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/python.exe
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/python.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/pythonw.exe
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/pythonw.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/say.vbs
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/say.vbs
Resource
win10v2004-20230221-en
Behavioral task
behavioral19
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/zsync.exe
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/zsync.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/zsyncmake.exe
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/zsyncmake.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
PokeStars-0.0.1-pc/lib/python3.9/__future__.pyc
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
PokeStars-0.0.1-pc/lib/python3.9/__future__.pyc
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
PokeStars-0.0.1-pc/lib/python3.9/_bootlocale.pyc
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
PokeStars-0.0.1-pc/lib/python3.9/_bootlocale.pyc
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
PokeStars-0.0.1-pc/lib/python3.9/_bootsubprocess.pyc
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
PokeStars-0.0.1-pc/lib/python3.9/_bootsubprocess.pyc
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
PokeStars-0.0.1-pc/lib/python3.9/_collections_abc.pyc
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
PokeStars-0.0.1-pc/lib/python3.9/_collections_abc.pyc
Resource
win10v2004-20230221-en
Behavioral task
behavioral31
Sample
PokeStars-0.0.1-pc/lib/python3.9/_compat_pickle.pyc
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
PokeStars-0.0.1-pc/lib/python3.9/_compat_pickle.pyc
Resource
win10v2004-20230220-en
General
-
Target
PokeStars-0.0.1-pc/lib/py3-windows-x86_64/libGLESv2.dll
-
Size
6.3MB
-
MD5
7dde909bd5c7538ac46064741a8da6c0
-
SHA1
46b50003be83eab7e0c48ebbd9260b5b021e70eb
-
SHA256
2d171e91e1fe7205b76dd69ba9f7ddce7910283a5a5111c09c84f5db8c795a74
-
SHA512
a057586a0b566c5470a6508e27764f9662ceaf3b08244c3db3d1e07789e87a30a43f1daad0274a4e3d00b641d3f9f90e9c073a5f7db3fa6d1de7f45c33adc092
-
SSDEEP
98304:1DACC5v8sHfvlfkvghk3xlkihzsfFUQOJt6c:CvxkvgfyoiQOR
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3248 2176 WerFault.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\PokeStars-0.0.1-pc\lib\py3-windows-x86_64\libGLESv2.dll,#11⤵PID:2176
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2176 -s 3402⤵
- Program crash
PID:3248
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 440 -p 2176 -ip 21761⤵PID:4012