998fe1bc6d19fac4a560e00a038c487fb79c14979b2929e0d7db395030bd6945

Submit
Reports

Overview

overview

Static

static

wintaylor2...32.dll

windows7-x64

wintaylor2...32.dll

windows10-2004-x64

wintaylor2...it.exe

windows7-x64

wintaylor2...it.exe

windows10-2004-x64

wintaylor2...LL.dll

windows7-x64

wintaylor2...LL.dll

windows10-2004-x64

wintaylor2...er.exe

windows7-x64

wintaylor2...er.exe

windows10-2004-x64

wintaylor2...er.dll

windows7-x64

wintaylor2...er.dll

windows10-2004-x64

wintaylor2...te.dll

windows7-x64

wintaylor2...te.dll

windows10-2004-x64

wintaylor2...32.dll

windows7-x64

wintaylor2...32.dll

windows10-2004-x64

wintaylor2...pt.dll

windows7-x64

wintaylor2...pt.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...ge.dll

windows7-x64

wintaylor2...ge.dll

windows10-2004-x64

wintaylor2...de.pdf

windows7-x64

wintaylor2...de.pdf

windows10-2004-x64

wintaylor2...40.dll

windows7-x64

wintaylor2...40.dll

windows10-2004-x64

Analysis

max time kernel
119s
max time network
231s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2023, 14:48

Sharing

Copy URL

Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

wintaylor2.1/COMDLG32.dll

Resource

win7-20231025-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

wintaylor2.1/COMDLG32.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

wintaylor2.1/Programs/HexEdit.exe

Resource

win7-20231025-en

upx

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

wintaylor2.1/Programs/HexEdit.exe

Resource

win10v2004-20231025-en

upx

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

wintaylor2.1/Programs/Imager/ADIsoDLL.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

wintaylor2.1/Programs/Imager/ADIsoDLL.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

wintaylor2.1/Programs/Imager/FTKImager.exe

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

wintaylor2.1/Programs/Imager/FTKImager.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

wintaylor2.1/Programs/Imager/IsoBuster.dll

Resource

win7-20231025-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

wintaylor2.1/Programs/Imager/IsoBuster.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

wintaylor2.1/Programs/Imager/MD5Remote.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

wintaylor2.1/Programs/Imager/MD5Remote.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

wintaylor2.1/Programs/Imager/adencrypt.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

wintaylor2.1/Programs/Imager/adencrypt.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll

Resource

win7-20231025-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

wintaylor2.1/Programs/Imager/cximage.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

wintaylor2.1/Programs/Imager/cximage.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf

Resource

win10v2004-20231023-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral31

Sample

wintaylor2.1/Programs/Imager/icudt40.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

wintaylor2.1/Programs/Imager/icudt40.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

wintaylor2.1/Programs/Imager/cximage.dll
Size

924KB
MD5

25dcd828d6d0050e0e798c331b0d003e
SHA1

04baca6d1e87cc164abdbff3973b33ec01b3a9cc
SHA256

e0327af6496a2149299b6d02ce930ebbb0ed7906fffdef470c1c2d393eb9be14
SHA512

48efcdd93198194481691f0646c8dcd07f3ba5adce42a2beea88e904c31f61f549b70eb606c229979f86cc6acadea16e1a9d50037621ea859b8e8fcde33988c3
SSDEEP

24576:Tpr7Lu5IqzELdaA4G/60LraEUfU+XTpBp:N77/6nlfzT7p

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4892	1704	WerFault.exe	87

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2648 wrote to memory of 1704	2648	rundll32.exe	87
PID 2648 wrote to memory of 1704	2648	rundll32.exe	87
PID 2648 wrote to memory of 1704	2648	rundll32.exe	87

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\wintaylor2.1\Programs\Imager\cximage.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2648
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\wintaylor2.1\Programs\Imager\cximage.dll,#1
  2⤵
  PID:1704
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1704 -s 616
    3⤵
    - Program crash
    PID:4892

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1704 -ip 1704
1⤵
PID:4240

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads