Overview
overview
10Static
static
3ChatGPT-4_Online.rar
windows7-x64
3ChatGPT-4_Online.rar
windows10-2004-x64
3ChatGPT-4 Online.exe
windows7-x64
10ChatGPT-4 Online.exe
windows10-2004-x64
10NL7Data0404.dll
windows7-x64
3NL7Data0404.dll
windows10-2004-x64
3NlsData004a.dll
windows7-x64
3NlsData004a.dll
windows10-2004-x64
3Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 21:14
Static task
static1
Behavioral task
behavioral1
Sample
ChatGPT-4_Online.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ChatGPT-4_Online.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
ChatGPT-4 Online.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
ChatGPT-4 Online.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
NL7Data0404.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
NL7Data0404.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
NlsData004a.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
NlsData004a.dll
Resource
win10v2004-20230221-en
General
-
Target
NL7Data0404.dll
-
Size
2.2MB
-
MD5
81b14fd1c9d2b830e55c93c4c38afa2f
-
SHA1
975bef050d9e8d2ee577e1b4db5dd6e2d67bff20
-
SHA256
878e2dbac4b6a6bcce54742f3c7bfd87aa93a6637cccc1e5d18ab65215d81bee
-
SHA512
16bcd415ca4cfc8813d990a304723a87122eede56a4f2c84b8fac91ccb0d5fd9c2db413358eecf145c1faad5b74f16b516a3c5e12f977bbca0cb6f66cc73d3ec
-
SSDEEP
24576:WckkkkkkHxKjbNX7UtOGwu1fg5tXVD539swzYNefx+Pff5pn3DXBdVjtxv/Ui:WeKYtOGwu1fg5FtJ9nMX5bL9z
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1960 2864 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NL7Data0404.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2864 -s 3282⤵
- Program crash
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 188 -p 2864 -ip 28641⤵