Overview
overview
3Static
static
3DAO-Modmanager.exe
windows7-x64
1DAO-Modmanager.exe
windows10-2004-x64
1DAO-Servic...ol.exe
windows7-x64
1DAO-Servic...ol.exe
windows10-2004-x64
1ICSharpCod...ib.dll
windows7-x64
1ICSharpCod...ib.dll
windows10-2004-x64
1PropertyGridEx.dll
windows7-x64
1PropertyGridEx.dll
windows10-2004-x64
1Analysis
-
max time kernel
127s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
01/08/2023, 05:14
Static task
static1
Behavioral task
behavioral1
Sample
DAO-Modmanager.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DAO-Modmanager.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
DAO-Servicecontrol.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
DAO-Servicecontrol.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
ICSharpCode.SharpZipLib.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
PropertyGridEx.dll
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
PropertyGridEx.dll
Resource
win10v2004-20230703-en
General
-
Target
DAO-Modmanager.exe
-
Size
1004KB
-
MD5
8c8dd876689c0715febeff0370923202
-
SHA1
60cfcd742e931136daceb514ffb64b3479646831
-
SHA256
a5896390ce0d3119d8b2ffba50b64ad6648791a72095968c0bfe4e3d7f582993
-
SHA512
d656d8d6e6e01691b0dab0e10609edd4769e7880d97cc7e9dbe174b93d9a6945a6a4a91343f001a093a3db1d8ec8228251fa147a3653c32440a0fa76d3024230
-
SSDEEP
12288:j5hn2M4nVnNxkTgSTZHh8RR0NUoJWeBwM4nVnNxkTgSTZHh8:jHkVNxkkSFBYCNB3kVNxkkSFB
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3736 DAO-Modmanager.exe 3736 DAO-Modmanager.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3736 DAO-Modmanager.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3736 DAO-Modmanager.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
644B
MD55e18bf00798df78584c8272b3f2d8405
SHA1fade2d58d123eae59a567afcccc5962b129b7882
SHA256dfd84a829d1411a982bd58286df3e744414ca3f3873015bf1961f959c2d7ec2e
SHA5128d2aba933537f7705873cd28edc3bd04ad9fe03315ff4862e2a32dc15e9447c9f65acc89695d8058cd58cea7023011d2147631e583fbfabc3fb8da2e6cdbab9b