Overview
overview
7Static
static
3EmgUsb.dll
windows7-x64
1EmgUsb.dll
windows10-2004-x64
1MSFLXGRD.dll
windows7-x64
1MSFLXGRD.dll
windows10-2004-x64
1MSHFLXGD.dll
windows7-x64
1MSHFLXGD.dll
windows10-2004-x64
1PreInstaller.exe
windows7-x64
1PreInstaller.exe
windows10-2004-x64
1SiUSBXp.dll
windows7-x64
1SiUSBXp.dll
windows10-2004-x64
3eManagerII.exe
windows7-x64
1eManagerII.exe
windows10-2004-x64
1e_manage2JP.dll
windows7-x64
1e_manage2JP.dll
windows10-2004-x64
1e_manage2US.dll
windows7-x64
1e_manage2US.dll
windows10-2004-x64
1emng2uni.exe
windows7-x64
1emng2uni.exe
windows10-2004-x64
1emng2uni2k.exe
windows7-x64
1emng2uni2k.exe
windows10-2004-x64
1emng2usb.sys
windows7-x64
1emng2usb.sys
windows10-2004-x64
1mfc42.dll
windows7-x64
1mfc42.dll
windows10-2004-x64
1msvcrt.dll
windows7-x64
3msvcrt.dll
windows10-2004-x64
3silib.sys
windows7-x64
1silib.sys
windows10-2004-x64
11.09_1.09_...te.msi
windows7-x64
71.09_1.09_...te.msi
windows10-2004-x64
71.09_1.09_...te.msi
windows7-x64
11.09_1.09_...te.msi
windows10-2004-x64
1Analysis
-
max time kernel
131s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2023 14:49
Static task
static1
Behavioral task
behavioral1
Sample
EmgUsb.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
EmgUsb.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
MSFLXGRD.dll
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
MSFLXGRD.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
MSHFLXGD.dll
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
MSHFLXGD.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
PreInstaller.exe
Resource
win7-20231025-en
Behavioral task
behavioral8
Sample
PreInstaller.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral9
Sample
SiUSBXp.dll
Resource
win7-20231025-en
Behavioral task
behavioral10
Sample
SiUSBXp.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral11
Sample
eManagerII.exe
Resource
win7-20231025-en
Behavioral task
behavioral12
Sample
eManagerII.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral13
Sample
e_manage2JP.dll
Resource
win7-20231025-en
Behavioral task
behavioral14
Sample
e_manage2JP.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
e_manage2US.dll
Resource
win7-20231023-en
Behavioral task
behavioral16
Sample
e_manage2US.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral17
Sample
emng2uni.exe
Resource
win7-20231023-en
Behavioral task
behavioral18
Sample
emng2uni.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
emng2uni2k.exe
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
emng2uni2k.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
emng2usb.sys
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
emng2usb.sys
Resource
win10v2004-20231020-en
Behavioral task
behavioral23
Sample
mfc42.dll
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
mfc42.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
msvcrt.dll
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
msvcrt.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
silib.sys
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
silib.sys
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
1.09_1.09_full/DISK/GReddy e-manage Ultimate.msi
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
1.09_1.09_full/DISK/GReddy e-manage Ultimate.msi
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
1.09_1.09_full/DISK/_vti_cnf/GReddy e-manage Ultimate.msi
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
1.09_1.09_full/DISK/_vti_cnf/GReddy e-manage Ultimate.msi
Resource
win10v2004-20231023-en
General
-
Target
PreInstaller.exe
-
Size
32KB
-
MD5
7f898b2e6d0c070c5525519b4968928d
-
SHA1
1b0ad723e5e94f797d826286cb96942ba6d8d936
-
SHA256
b04d8dbc74abf343789d9641a15416738dcd3b8505419c7308f2d3d3e649b549
-
SHA512
d46eefde2776da6cb4af7fb38d70dfd5b7359f2cc3a1174c292d6f5536ccaedb5bd8839281189c193a9da858ebc301815320b584d18ef6a36f323bbe204974ab
-
SSDEEP
384:jV4K129tPqeDHf3PpIkXnpYoOSuSmh1CDfZpQju95AhY:68QXPPph1OSu3Ctiju95d
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
PreInstaller.exepid process 2020 PreInstaller.exe 2020 PreInstaller.exe