Overview
overview
7Static
static
3ScriptHook....0.zip
windows7-x64
1ScriptHook....0.zip
windows10-2004-x64
5bin/NativeTrainer.dll
windows7-x64
1bin/NativeTrainer.dll
windows10-2004-x64
3bin/ScriptHookV.dll
windows7-x64
1bin/ScriptHookV.dll
windows10-2004-x64
3bin/dinput8.dll
windows7-x64
7bin/dinput8.dll
windows10-2004-x64
7readme.vbs
windows7-x64
1readme.vbs
windows10-2004-x64
1www.dev-c.com.url
windows7-x64
6www.dev-c.com.url
windows10-2004-x64
3Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
03/09/2023, 17:30
Static task
static1
Behavioral task
behavioral1
Sample
ScriptHookV_1.0.2944.0.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ScriptHookV_1.0.2944.0.zip
Resource
win10v2004-20230831-en
Behavioral task
behavioral3
Sample
bin/NativeTrainer.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
bin/NativeTrainer.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral5
Sample
bin/ScriptHookV.dll
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
bin/ScriptHookV.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral7
Sample
bin/dinput8.dll
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
bin/dinput8.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral9
Sample
readme.vbs
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
readme.vbs
Resource
win10v2004-20230831-en
Behavioral task
behavioral11
Sample
www.dev-c.com.url
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
www.dev-c.com.url
Resource
win10v2004-20230831-en
General
-
Target
bin/NativeTrainer.dll
-
Size
211KB
-
MD5
e107b94ae23ec9a56bfa1faaf7118e85
-
SHA1
191d9a3a09ee0cfc0754226988c0373a5f074068
-
SHA256
f2302573ced45cdaaf190f332deeafd3f32e179d7e9102d939608a9ab774b3cf
-
SHA512
86720525ebfa76628a4540a0344de29cf7135ed89dc0c38665fcc2d9ea83c0a2b9341f7d8945e54083317e2dbbb120c68afeb4a7cbbe182db5711c3638d04e90
-
SSDEEP
3072:UPjp1DjzsOn9DTtDs5hmmFlPV1GuV1YTrsof+/3YFoYr6SXvfVd5u:UbbD/PFTK3mydcuDa40iYr6SXTo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4468 4744 WerFault.exe 84
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\NativeTrainer.dll,#11⤵PID:4744
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4744 -s 3482⤵
- Program crash
PID:4468
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 4744 -ip 47441⤵PID:4292