98c0eb12431feecf5ec271bd633aa68afd213b23f9f2141aaafef7b15ddd43e4

Submit
Reports

Overview

overview

Static

static

wintaylor2...32.dll

windows7-x64

wintaylor2...32.dll

windows10-2004-x64

wintaylor2...it.exe

windows7-x64

wintaylor2...it.exe

windows10-2004-x64

wintaylor2...LL.dll

windows7-x64

wintaylor2...LL.dll

windows10-2004-x64

wintaylor2...er.exe

windows7-x64

wintaylor2...er.exe

windows10-2004-x64

wintaylor2...er.dll

windows7-x64

wintaylor2...er.dll

windows10-2004-x64

wintaylor2...te.dll

windows7-x64

wintaylor2...te.dll

windows10-2004-x64

wintaylor2...32.dll

windows7-x64

wintaylor2...32.dll

windows10-2004-x64

wintaylor2...pt.dll

windows7-x64

wintaylor2...pt.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...ge.dll

windows7-x64

wintaylor2...ge.dll

windows10-2004-x64

wintaylor2...de.pdf

windows7-x64

wintaylor2...de.pdf

windows10-2004-x64

wintaylor2...40.dll

windows7-x64

wintaylor2...40.dll

windows10-2004-x64

Analysis

max time kernel
121s
max time network
146s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 13:55

Sharing

Copy URL

Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

wintaylor2.1/COMDLG32.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

wintaylor2.1/COMDLG32.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

wintaylor2.1/Programs/HexEdit.exe

Resource

win7-20231023-en

upx

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

wintaylor2.1/Programs/HexEdit.exe

Resource

win10v2004-20231023-en

upx

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

wintaylor2.1/Programs/Imager/ADIsoDLL.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

wintaylor2.1/Programs/Imager/ADIsoDLL.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

wintaylor2.1/Programs/Imager/FTKImager.exe

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

wintaylor2.1/Programs/Imager/FTKImager.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

wintaylor2.1/Programs/Imager/IsoBuster.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

wintaylor2.1/Programs/Imager/IsoBuster.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

wintaylor2.1/Programs/Imager/MD5Remote.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

wintaylor2.1/Programs/Imager/MD5Remote.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

wintaylor2.1/Programs/Imager/adencrypt.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

wintaylor2.1/Programs/Imager/adencrypt.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll

Resource

win7-20231025-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

wintaylor2.1/Programs/Imager/cximage.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

wintaylor2.1/Programs/Imager/cximage.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf

Resource

win10v2004-20231025-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral31

Sample

wintaylor2.1/Programs/Imager/icudt40.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

wintaylor2.1/Programs/Imager/icudt40.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

wintaylor2.1/Programs/Imager/icudt40.dll
Size

13.3MB
MD5

60fd886981d8c70221f9dcde22c36871
SHA1

a14b9becdd189328a090899185303f650387c0a3
SHA256

29ed9a899eaeaed5920f1f42b88d127540282d755dc420d172c5558983109d51
SHA512

8a675287e3f8ae334ea2b36dd1dd3ded6ca25fb60112fd34c524e7d378338d2c6ecf8bd892811e368e06ba49920ec54f39f04c6573298dcf5e4610a5c7a14d70
SSDEEP

196608:jzfDbmL2j9lM+n42j9lY+nfRm2j9lt+n4Av39eTLIO5gzeers7dj1:jzfDbPX1XVXrAv39eTLIO5gPrsRh

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2584 wrote to memory of 2688	2584	rundll32.exe	29
PID 2584 wrote to memory of 2688	2584	rundll32.exe	29
PID 2584 wrote to memory of 2688	2584	rundll32.exe	29

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\wintaylor2.1\Programs\Imager\icudt40.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2584
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2584 -s 84
  2⤵
  PID:2688

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads