Overview
overview
10Static
static
10wintaylor2...32.dll
windows7-x64
1wintaylor2...32.dll
windows10-2004-x64
1wintaylor2...it.exe
windows7-x64
7wintaylor2...it.exe
windows10-2004-x64
7wintaylor2...LL.dll
windows7-x64
3wintaylor2...LL.dll
windows10-2004-x64
3wintaylor2...er.exe
windows7-x64
1wintaylor2...er.exe
windows10-2004-x64
1wintaylor2...er.dll
windows7-x64
6wintaylor2...er.dll
windows10-2004-x64
6wintaylor2...te.dll
windows7-x64
1wintaylor2...te.dll
windows10-2004-x64
1wintaylor2...32.dll
windows7-x64
3wintaylor2...32.dll
windows10-2004-x64
3wintaylor2...pt.dll
windows7-x64
1wintaylor2...pt.dll
windows10-2004-x64
1wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
1wintaylor2...39.dll
windows10-2004-x64
1wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...ge.dll
windows7-x64
3wintaylor2...ge.dll
windows10-2004-x64
3wintaylor2...de.pdf
windows7-x64
1wintaylor2...de.pdf
windows10-2004-x64
1wintaylor2...40.dll
windows7-x64
1wintaylor2...40.dll
windows10-2004-x64
1Analysis
-
max time kernel
157s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2023 14:48
Behavioral task
behavioral1
Sample
wintaylor2.1/COMDLG32.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
wintaylor2.1/COMDLG32.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
wintaylor2.1/Programs/HexEdit.exe
Resource
win7-20231025-en
Behavioral task
behavioral4
Sample
wintaylor2.1/Programs/HexEdit.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral5
Sample
wintaylor2.1/Programs/Imager/ADIsoDLL.dll
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
wintaylor2.1/Programs/Imager/ADIsoDLL.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
wintaylor2.1/Programs/Imager/FTKImager.exe
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
wintaylor2.1/Programs/Imager/FTKImager.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
wintaylor2.1/Programs/Imager/IsoBuster.dll
Resource
win7-20231025-en
Behavioral task
behavioral10
Sample
wintaylor2.1/Programs/Imager/IsoBuster.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
wintaylor2.1/Programs/Imager/MD5Remote.dll
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
wintaylor2.1/Programs/Imager/MD5Remote.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
wintaylor2.1/Programs/Imager/adencrypt.dll
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
wintaylor2.1/Programs/Imager/adencrypt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll
Resource
win7-20231025-en
Behavioral task
behavioral26
Sample
wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
wintaylor2.1/Programs/Imager/cximage.dll
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
wintaylor2.1/Programs/Imager/cximage.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf
Resource
win7-20231023-en
Behavioral task
behavioral30
Sample
wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
wintaylor2.1/Programs/Imager/icudt40.dll
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
wintaylor2.1/Programs/Imager/icudt40.dll
Resource
win10v2004-20231023-en
General
-
Target
wintaylor2.1/Programs/Imager/FTKImager.exe
-
Size
8.6MB
-
MD5
fe7c1a0aeae7bb0725221a3f8feee823
-
SHA1
bb12b94e2c40cbdbf9d91552bd5ccba0ab8cd760
-
SHA256
d64a6b078d8d68b8cca48ad36f9a1b98f3010da2c7f585a6a687086feab0662c
-
SHA512
4735d296722c03de03049e00eac67f76669110560d35155f2e78e74bb2ad6e76eed24f2aa35bfa7c717779d377e26a990c2a8b83214f544c3d1ab4cbd3ede334
-
SSDEEP
196608:s7l4VWz9hhWU0chIVNdn8crTRJdkbHb6xLLDa+2YNGUw:FVWvblhIVNdn8cPZu76xLLDY
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4716 FTKImager.exe 4716 FTKImager.exe 4716 FTKImager.exe 4716 FTKImager.exe