Overview
overview
3Static
static
3portable/MSVCP90.dll
windows7-x64
1portable/MSVCP90.dll
windows10-2004-x64
1portable/_hashlib.dll
windows7-x64
1portable/_hashlib.dll
windows10-2004-x64
1portable/_ssl.dll
windows7-x64
1portable/_ssl.dll
windows10-2004-x64
1portable/bz2.dll
windows7-x64
1portable/bz2.dll
windows10-2004-x64
1portable/ffmpeg.exe
windows7-x64
1portable/ffmpeg.exe
windows10-2004-x64
1portable/ffprobe.exe
windows7-x64
1portable/ffprobe.exe
windows10-2004-x64
1portable/python27.dll
windows7-x64
3portable/python27.dll
windows10-2004-x64
3portable/select.dll
windows7-x64
1portable/select.dll
windows10-2004-x64
1portable/u...ta.dll
windows7-x64
1portable/u...ta.dll
windows10-2004-x64
1portable/w9xpopen.exe
windows7-x64
1portable/w9xpopen.exe
windows10-2004-x64
1portable/w...bo.dll
windows7-x64
1portable/w...bo.dll
windows10-2004-x64
1portable/w...s_.dll
windows7-x64
1portable/w...s_.dll
windows10-2004-x64
1portable/w...e_.dll
windows7-x64
1portable/w...e_.dll
windows10-2004-x64
1portable/wx._gdi_.dll
windows7-x64
1portable/wx._gdi_.dll
windows10-2004-x64
1portable/w...c_.dll
windows7-x64
1portable/w...c_.dll
windows10-2004-x64
1portable/w...s_.dll
windows7-x64
1portable/w...s_.dll
windows10-2004-x64
1Analysis
-
max time kernel
27s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
25/04/2023, 14:05
Static task
static1
Behavioral task
behavioral1
Sample
portable/MSVCP90.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
portable/MSVCP90.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
portable/_hashlib.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
portable/_hashlib.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
portable/_ssl.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
portable/_ssl.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
portable/bz2.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
portable/bz2.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
portable/ffmpeg.exe
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
portable/ffmpeg.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
portable/ffprobe.exe
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
portable/ffprobe.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
portable/python27.dll
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
portable/python27.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
portable/select.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
portable/select.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
portable/unicodedata.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
portable/unicodedata.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
portable/w9xpopen.exe
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
portable/w9xpopen.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
portable/wx._combo.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
portable/wx._combo.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
portable/wx._controls_.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
portable/wx._controls_.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
portable/wx._core_.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
portable/wx._core_.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
portable/wx._gdi_.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
portable/wx._gdi_.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral29
Sample
portable/wx._misc_.dll
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
portable/wx._misc_.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
portable/wx._windows_.dll
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
portable/wx._windows_.dll
Resource
win10v2004-20230220-en
General
-
Target
portable/bz2.dll
-
Size
69KB
-
MD5
58c57a662cde57fea311444cc8dadc24
-
SHA1
1c3a7b564ec9abc4172c98db7069170e50b70efa
-
SHA256
69b4ec17de1368a9ea62313954629e1ace3f414a7eaedcedbfc79b110cadbaac
-
SHA512
239584de4d57d8f4e92d7dee8ba99f3964b9b30cd3642a38f536dd1aec35e1747ca1555ca13fc2b872a9624685117646ca3d2407ea91d19915d2a9aedfab0430
-
SSDEEP
1536:InfB9P4y4yhXYjrKV4S1uB8xguvaG+6r8S+f0PP8zKTiL:IfRYn04Su8xguvaG+64Zfm5Ti
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 848 wrote to memory of 2024 848 rundll32.exe 27 PID 848 wrote to memory of 2024 848 rundll32.exe 27 PID 848 wrote to memory of 2024 848 rundll32.exe 27 PID 848 wrote to memory of 2024 848 rundll32.exe 27 PID 848 wrote to memory of 2024 848 rundll32.exe 27 PID 848 wrote to memory of 2024 848 rundll32.exe 27 PID 848 wrote to memory of 2024 848 rundll32.exe 27