Overview
overview
5Static
static
3Rogue-main...ET.dll
windows7-x64
1Rogue-main...ET.dll
windows10-2004-x64
1Rogue-main/build.dll
windows7-x64
1Rogue-main/build.dll
windows10-2004-x64
1Rogue-main...or.exe
windows7-x64
5Rogue-main...or.exe
windows10-2004-x64
5Rogue-main...ce.exe
windows7-x64
3Rogue-main...ce.exe
windows10-2004-x64
1Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
06-10-2023 01:01
Static task
static1
Behavioral task
behavioral1
Sample
Rogue-main/ScintillaNET.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Rogue-main/ScintillaNET.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
Rogue-main/build.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Rogue-main/build.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
Rogue-main/injector.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Rogue-main/injector.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Rogue-main/interface.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Rogue-main/interface.exe
Resource
win10v2004-20230915-en
General
-
Target
Rogue-main/injector.exe
-
Size
5.4MB
-
MD5
bc97697a87579cd2efdf03f9a0926eb2
-
SHA1
f505384c8b632aea7e5eb8b4f03ef075c67e66f5
-
SHA256
6b60491abaf6c3238ea7797f304b4ba2da1368006b5ff0f7a840c718f2e6111e
-
SHA512
1db9e2ee2ea0e683b3a35203455fa7404c164625f76033481649f6fdefecfe4b5ddd622e773dec43edb28d28c23f0013376dd50a247cf1832bd98f137dcc4ce5
-
SSDEEP
98304:6iWk/dTDTy5WWXMniwwjgMzZoEhr2SjPnvbKPrw1WQk4UpGNVacItymcXSh2:XTDgoiwwjgMNBhrdP+jYWJBedoymcX
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 3968 injector.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3968 injector.exe 3968 injector.exe 3968 injector.exe 3968 injector.exe