Overview
overview
7Static
static
1install-kb...42.cmd
windows7-x64
3install-kb...42.cmd
windows10-2004-x64
7x86_micros...ux.dll
windows7-x64
1x86_micros...ux.dll
windows10-2004-x64
1x86_micros...ux.dll
windows7-x64
1x86_micros...ux.dll
windows10-2004-x64
1x86_micros...ng.dll
windows7-x64
1x86_micros...ng.dll
windows10-2004-x64
1x86_micros...ne.dll
windows7-x64
1x86_micros...ne.dll
windows10-2004-x64
1x86_micros...ne.exe
windows7-x64
x86_micros...ne.exe
windows10-2004-x64
x86_micros...es.exe
windows7-x64
x86_micros...es.exe
windows10-2004-x64
x86_micros...ig.dll
windows7-x64
1x86_micros...ig.dll
windows10-2004-x64
1x86_micros...st.exe
windows7-x64
x86_micros...st.exe
windows10-2004-x64
x86_micros...et.exe
windows7-x64
x86_micros...et.exe
windows10-2004-x64
x86_micros...ng.dll
windows7-x64
1x86_micros...ng.dll
windows10-2004-x64
1x86_micros...ne.dll
windows7-x64
1x86_micros...ne.dll
windows10-2004-x64
1x86_micros...ne.exe
windows7-x64
x86_micros...ne.exe
windows10-2004-x64
x86_micros...es.exe
windows7-x64
x86_micros...es.exe
windows10-2004-x64
x86_micros...ig.dll
windows7-x64
1x86_micros...ig.dll
windows10-2004-x64
1x86_micros...st.exe
windows7-x64
x86_micros...st.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
install-kb-5021042.cmd
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
install-kb-5021042.cmd
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
x86_microsoft-windows-bootmenuux_31bf3856ad364e35_10.0.17763.3646_none_e63309312ee5a0f0/f/bootmenuux.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
x86_microsoft-windows-bootmenuux_31bf3856ad364e35_10.0.17763.3646_none_e63309312ee5a0f0/f/bootmenuux.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
x86_microsoft-windows-bootmenuux_31bf3856ad364e35_10.0.17763.3646_none_e63309312ee5a0f0/r/bootmenuux.dll
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
x86_microsoft-windows-bootmenuux_31bf3856ad364e35_10.0.17763.3646_none_e63309312ee5a0f0/r/bootmenuux.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/reseteng.dll
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/reseteng.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengine.dll
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengine.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengine.exe
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengine.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetenginterfaces.exe
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetenginterfaces.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengmig.dll
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengmig.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetpluginhost.exe
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetpluginhost.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/sysreset.exe
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/sysreset.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/reseteng.dll
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/reseteng.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengine.dll
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengine.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengine.exe
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengine.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetenginterfaces.exe
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetenginterfaces.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral29
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengmig.dll
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengmig.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral31
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetpluginhost.exe
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetpluginhost.exe
Resource
win10v2004-20230915-en
General
-
Target
update-kb-5021042.zip
-
Size
295KB
-
MD5
4588d3acf87953f9470fb9c067d24e6c
-
SHA1
3f012e032ec81bb0473115d721071dd52931885b
-
SHA256
54a27464c7ad7f2e32cd123b27c0f9082590cd5ba48526bf00728e8107048f48
-
SHA512
9a06005db9fb6faa7cd1542e0d338baf11ded501cc800900aefff469e8b7476532ff9a820ee5ada288033a11738fdea209cff868e44efb7ebd25e8ba811c4a1d
-
SSDEEP
6144:lSA2dOxqhAHpUR8yYpKGv3mY8/G1wh+f9ERFN/gB9Pc66SFqi:lSbOxqhxR834rX436R7gbwSFqi
Malware Config
Signatures
Files
-
update-kb-5021042.zip.zip
-
install-kb-5021042.cmd
-
windows-kb5021042.cab.cab
-
package_1_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.cat
-
package_1_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.mum
-
package_2_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.cat
-
package_2_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.mum
-
package_3_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.cat
-
package_3_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.mum
-
package_4_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.cat
-
package_4_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.mum
-
package_5_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.cat
-
package_5_for_kb5021042~31bf3856ad364e35~x86~~10.0.1.0.mum
-
update.cat
-
update.mum
-
x86_7aaf1ad8326d478ac09894d9d26fc337_31bf3856ad364e35_10.0.17763.587_none_a00964a98d0e539e.manifest
-
x86_b9a9c8b928354e4922df7a1b23ef250f_31bf3856ad364e35_10.0.17763.344_none_4e537bc56eb493bc.manifest
-
x86_e0129608855020c13c48e15cae617d26_31bf3856ad364e35_10.0.17763.3646_none_4260c3a5b3f8d3d4.manifest
-
x86_f32dd521786de62a85e76c8755ca4107_31bf3856ad364e35_10.0.17763.344_none_5385cf6bceed296e.manifest
-
x86_microsoft-windows-bootmenuux_31bf3856ad364e35_10.0.17763.3646_none_e63309312ee5a0f0.manifest.xml
-
x86_microsoft-windows-bootmenuux_31bf3856ad364e35_10.0.17763.3646_none_e63309312ee5a0f0/f/bootmenuux.dll
-
x86_microsoft-windows-bootmenuux_31bf3856ad364e35_10.0.17763.3646_none_e63309312ee5a0f0/r/bootmenuux.dll
-
x86_microsoft-windows-ntfs_31bf3856ad364e35_10.0.17763.587_none_bef1dfcbea56b050.manifest.xml
-
x86_microsoft-windows-ntfs_31bf3856ad364e35_10.0.17763.587_none_bef1dfcbea56b050/f/ntfs.sys
-
x86_microsoft-windows-ntfs_31bf3856ad364e35_10.0.17763.587_none_bef1dfcbea56b050/r/ntfs.sys
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964.manifest
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/reseteng.dll
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengine.dll
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengine.exe
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetenginterfaces.exe
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetengmig.dll
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/resetpluginhost.exe
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/srms.dat
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/srms62.dat
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/f/sysreset.exe
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/reseteng.dll
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengine.dll
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengine.exe
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetenginterfaces.exe
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetengmig.dll
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/resetpluginhost.exe
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/srms.dat
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/srms62.dat
-
x86_microsoft-windows-sysreset_31bf3856ad364e35_10.0.17763.344_none_54cb0c264bc45964/r/sysreset.exe
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa.manifest
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/f/reseteng.dll
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/f/resetengine.dll
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/f/resetengine.exe
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/f/resetengonline.dll
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/f/srms.dat
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/f/sysreseterr.exe
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/f/systemreset.exe
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/r/reseteng.dll
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/r/resetengine.dll
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/r/resetengine.exe
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/r/resetengonline.dll
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/r/srms.dat
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/r/sysreseterr.exe
-
x86_microsoft-windows-systemreset_31bf3856ad364e35_10.0.17763.344_none_03b96fc9494c6daa/r/systemreset.exe