Analysis
-
max time kernel
138s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2023 06:56
Static task
static1
Behavioral task
behavioral1
Sample
HBoot_v0.31 .exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
HBoot_v0.31 .exe
Resource
win10v2004-20230915-en
General
-
Target
HBoot_v0.31 .exe
-
Size
19.4MB
-
MD5
c05627169ff24eb0e9e7516294dce64a
-
SHA1
c4d1f630d7b50113708809b1271f341b5d40f76c
-
SHA256
5121b2ecfc75ad01c9dcc39d397fb2efaeaa798cae005c7eaa30faaf1481158a
-
SHA512
180aff21e05a40fc95b6d328a1d3a016f47398df22790188d5bc9b76fa60a550817b75c2f6cdd26f4f2f8f99b6699ad34de702f7be1eaf0b651c030fe67a4e10
-
SSDEEP
393216:+T3gJPN/ZEDfxh/4W+DjMt/c7oFpiA4bTbG+PoWsMa7mAi:O3gJV/Z0J+DjMt/5FpjR+Q57mA
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
pid Process 4520 HBoot_v0.31 .exe 4520 HBoot_v0.31 .exe 4520 HBoot_v0.31 .exe 4520 HBoot_v0.31 .exe -
Program crash 1 IoCs
pid pid_target Process procid_target 3440 4520 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\HBoot_v0.31 .exe"C:\Users\Admin\AppData\Local\Temp\HBoot_v0.31 .exe"1⤵
- Loads dropped DLL
PID:4520 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4520 -s 7082⤵
- Program crash
PID:3440
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4520 -ip 45201⤵PID:2296
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5fbdb8ec65e8d1bf6e9fef95e0690b0ff
SHA10e1a00e528babfaad2dc5132d7892b2fc687b2d1
SHA256196976e5a5843cd21f5dfb68385474626982862ececf36db4ba1c6a60d276342
SHA512e80f3bc405a2ce3dafebafcd73beb3babda4610f9435e997f37f53e084dfd09140ce24c79377615db627263b38eadc8de28fec00eeadd708473aafcf6e849782
-
Filesize
1KB
MD58065a90a9a60de2b29d16ec5fd4eb2ed
SHA186987a8caf29ed4b22ce90cb818b278477d5f2ab
SHA2560a85556e69adab909d18ebd1065fd6f71d4dd4286097e6c0c6c679adbb100858
SHA512bbddb504b6cee1f8c59c444133eff4d06ee8788a4ffdb6d359aacf555471c00409cbf2dc232f3c3ea7165b4b1067d28d059787cdfeaa64359746270ea031909f
-
Filesize
1KB
MD5b21bc94972626d04b7dc96fdf77a6f11
SHA16e62eda35d7919a64ec62d13a4b4672a447af948
SHA256d174eeecb5b141ac6aa2cafe7986bf576fed7ced0ad270ff07abbde38a089387
SHA5129b70b4c2c9921ab9622a9aade37ce733465b044911e5513513199f3151a455000acf888b96bb6a0cfb557370be7550b5a268dfe8941313b0f8f8101a7a89efc2
-
Filesize
1KB
MD582dcb5b8fba7c24f275b582fc24cd456
SHA146b8e57ebfa71e85ea26ceaf5ced41e9ee01d5a2
SHA256f3dfc4c65e89932c35fae88a5d657b3ff16e3c73b9896eb1f6326ab087032ad1
SHA51277297b3a1250f16458c91c87310b3bafc47d1514ce0f6b40d8942bfbca5d8529e37b8280f1d7a4ff290d1300fd9f8a5c4254d720afc2c7dccf82e62981fd81db