Overview
overview
10Static
static
3ChatGPT-4_Online.rar
windows7-x64
3ChatGPT-4_Online.rar
windows10-2004-x64
3ChatGPT-4 Online.exe
windows7-x64
10ChatGPT-4 Online.exe
windows10-2004-x64
10NL7Data0404.dll
windows7-x64
3NL7Data0404.dll
windows10-2004-x64
3NlsData004a.dll
windows7-x64
3NlsData004a.dll
windows10-2004-x64
3Analysis
-
max time kernel
29s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
20-05-2023 21:14
Static task
static1
Behavioral task
behavioral1
Sample
ChatGPT-4_Online.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ChatGPT-4_Online.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
ChatGPT-4 Online.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
ChatGPT-4 Online.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
NL7Data0404.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
NL7Data0404.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
NlsData004a.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
NlsData004a.dll
Resource
win10v2004-20230221-en
General
-
Target
NlsData004a.dll
-
Size
3.1MB
-
MD5
be007b645b9d1332e3346107727320d9
-
SHA1
0717c6fea33ddd04b9f032039d23c66efd5e5f76
-
SHA256
7b128be8d77398cbc3bb789a34e21afc984c2e87276907a01326f8fb4504e9da
-
SHA512
8e205aaf5ef8a1e5259634ff51b1e0da8bf35ace547e01de05a02dd0ad55ef7a46329737ba062556c195ba0ef6e3722ea144752f0aa8330c440dac38b2653f82
-
SSDEEP
24576:oJEJNe9wndvrpof5UUv6ujcqJByewHXqQpiPlJKaTsO0KwRB3Q/CDuCF:k9CNofaXXqQpTawO0KwRB3Q/Au
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 280 316 WerFault.exe rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 316 wrote to memory of 280 316 rundll32.exe WerFault.exe PID 316 wrote to memory of 280 316 rundll32.exe WerFault.exe PID 316 wrote to memory of 280 316 rundll32.exe WerFault.exe