Overview
overview
3Static
static
3hypertermi...ns.dll
windows7-x64
1hypertermi...ns.dll
windows10-2004-x64
1hypertermi...is.dll
windows7-x64
1hypertermi...is.dll
windows10-2004-x64
3hypertermi...rm.dll
windows7-x64
1hypertermi...rm.dll
windows10-2004-x64
1hypertermi...rm.exe
windows7-x64
1hypertermi...rm.exe
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11-10-2023 12:10
Static task
static1
Behavioral task
behavioral1
Sample
hyperterminal/hticons.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
hyperterminal/hticons.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
hyperterminal/htrn_jis.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
hyperterminal/htrn_jis.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
hyperterminal/hypertrm.dll
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
hyperterminal/hypertrm.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
hyperterminal/hypertrm.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
hyperterminal/hypertrm.exe
Resource
win10v2004-20230915-en
General
-
Target
hyperterminal/hypertrm.exe
-
Size
27KB
-
MD5
e343d8fd33a81412efd19e80994e1019
-
SHA1
c09227a10e215b40883bb651dc817c66ff53680d
-
SHA256
111a2de2d916b60ecd53a80b82e395b553248a18eaa8a6e893756a98580f4a21
-
SHA512
7873eec42cd08d95cd5dccfc95545ba347a585f2910ebd038a64a6e2fe1c90cd6b1c9c52d7b73955296275ee1dd0f2af51b137130ea43ab278e91f7f7ad4d8f3
-
SSDEEP
384:KLR4JqsYPGyur9idnY89fgIXtee3HX6zUMsgUqjX17E+qu+S2nfPjIREaFgW:8R02G9GnF4NrIMWG5ErjS2HjIREA
Malware Config
Signatures
-
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\telnet\shell\open\command hypertrm.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2056 hypertrm.exe