Overview
overview
7Static
static
7109CommandLib.dll
windows7-x64
1109CommandLib.dll
windows10-2004-x64
1HDSEvtMsg.dll
windows7-x64
1HDSEvtMsg.dll
windows10-2004-x64
1HDSentinel.exe
windows7-x64
7HDSentinel.exe
windows10-2004-x64
1HDSentinelTray.exe
windows7-x64
7HDSentinelTray.exe
windows10-2004-x64
7Storagetest.exe
windows7-x64
7Storagetest.exe
windows10-2004-x64
7afaapi.dll
windows7-x64
1afaapi.dll
windows10-2004-x64
1bc_vbdll.dll
windows7-x64
7bc_vbdll.dll
windows10-2004-x64
7de.chm
windows7-x64
1de.chm
windows10-2004-x64
1deta.exe
windows7-x64
7deta.exe
windows10-2004-x64
7deta1.exe
windows7-x64
7deta1.exe
windows10-2004-x64
7detat.exe
windows7-x64
1detat.exe
windows10-2004-x64
1detect.exe
windows7-x64
7detect.exe
windows10-2004-x64
7dethp.exe
windows7-x64
7dethp.exe
windows10-2004-x64
7dethp2.exe
windows7-x64
1dethp2.exe
windows10-2004-x64
1dethpt.exe
windows7-x64
7dethpt.exe
windows10-2004-x64
7detjm.exe
windows7-x64
1detjm.exe
windows10-2004-x64
1Analysis
-
max time kernel
136s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2023, 08:42
Behavioral task
behavioral1
Sample
109CommandLib.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
109CommandLib.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
HDSEvtMsg.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
HDSEvtMsg.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
HDSentinel.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
HDSentinel.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
HDSentinelTray.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
HDSentinelTray.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
Storagetest.exe
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Storagetest.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
afaapi.dll
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
afaapi.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
bc_vbdll.dll
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
bc_vbdll.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
de.chm
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
de.chm
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
deta.exe
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
deta.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
deta1.exe
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
deta1.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
detat.exe
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
detat.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
detect.exe
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
detect.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
dethp.exe
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
dethp.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
dethp2.exe
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
dethp2.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral29
Sample
dethpt.exe
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
dethpt.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral31
Sample
detjm.exe
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
detjm.exe
Resource
win10v2004-20230915-en
General
-
Target
deta1.exe
-
Size
23KB
-
MD5
b15b1d7bcf5255b013c8493f44661d1a
-
SHA1
620e88e23daff2d12b481b0c18a00bf4788ab547
-
SHA256
f546140ffb9247af434abe0e8949a9c63e043484beabf171bd802b7005b4a216
-
SHA512
c41d085e18ad7cca311df03749a8bf51b00af01e005d4a011bc0168311c0338d1985e18858aba579a23ca5293cb49dcac967b4452511dadb6f7bd2f83e8a2ff2
-
SSDEEP
384:m8iW2adkCPxGN2KxPBGpCxhCxXn8+g+D0Gt8iiyoGNGb5hiX8ZpHt9HX:mVW6MGNiEmmeV8iiyuriXiR/X
Malware Config
Signatures
-
resource yara_rule behavioral20/memory/112-0-0x0000000000400000-0x0000000000409000-memory.dmp upx behavioral20/memory/112-2-0x0000000000400000-0x0000000000409000-memory.dmp upx