Analysis
-
max time kernel
117s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
23-08-2023 22:07
General
-
Target
JOYSTICK/XOutput.v0.11/ScpDriver/System/ScpVBus.cat
-
Size
12KB
-
MD5
7492d3a14295cf07247072bc6dfa18d8
-
SHA1
5b51ea5beec952dfc540f16a391bf13e51af5c76
-
SHA256
b2f1e2641c9c329c5b28a366952d78fa30243efa8805d1ed8d8909b55024e5ff
-
SHA512
2fb9dbb8520e0c41b120e2acb85b32c322aba2a3e366c7a46bfdd7389e1f0793e07696dcdde335ff0b2dbe532a1bcd8592053dc31e13f6f5096df29381aeca24
-
SSDEEP
192:eAIhUb2EOwXMFmIrmu+RTBb6eIpUMhl/lreMIILN6Uh7EsM8II+9iGEfgUv5ImD7:Gwqrn2KPYSPLjYdtRHg
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 6 IoCs
Processes
-
C:\Windows\system32\rundll32.exeC:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCAT C:\Users\Admin\AppData\Local\Temp\JOYSTICK\XOutput.v0.11\ScpDriver\System\ScpVBus.cat1⤵
- Blocklisted process makes network request
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
61KB
MD5e56ec378251cd65923ad88c1e14d0b6e
SHA17f5d986e0a34dd81487f6439fb0446ffa52a712e
SHA25632ccf567c07b62b6078cf03d097e21cbf7ef67a4ce312c9c34a47f865b3ad0a0
SHA5122737a622ca45b532aebc202184b3e35cde8684e5296cb1f008e7831921be2895a43f952c1df88d33011a7b9586aafbd88483f6c134cb5e8e98c236f5abb5f3aa