0817ebba1e998e81e7c1173f5410d13b2e401396c37a490991418241baab2d38

Submit
Reports

Overview

overview

Static

static

wintaylor2...32.dll

windows7-x64

wintaylor2...32.dll

windows10-2004-x64

wintaylor2...it.exe

windows7-x64

wintaylor2...it.exe

windows10-2004-x64

wintaylor2...LL.dll

windows7-x64

wintaylor2...LL.dll

windows10-2004-x64

wintaylor2...er.exe

windows7-x64

wintaylor2...er.exe

windows10-2004-x64

wintaylor2...er.dll

windows7-x64

wintaylor2...er.dll

windows10-2004-x64

wintaylor2...te.dll

windows7-x64

wintaylor2...te.dll

windows10-2004-x64

wintaylor2...32.dll

windows7-x64

wintaylor2...32.dll

windows10-2004-x64

wintaylor2...pt.dll

windows7-x64

wintaylor2...pt.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...39.dll

windows7-x64

wintaylor2...39.dll

windows10-2004-x64

wintaylor2...ge.dll

windows7-x64

wintaylor2...ge.dll

windows10-2004-x64

wintaylor2...de.pdf

windows7-x64

wintaylor2...de.pdf

windows10-2004-x64

wintaylor2...40.dll

windows7-x64

wintaylor2...40.dll

windows10-2004-x64

Analysis

max time kernel
119s
max time network
135s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
07-11-2023 14:08

Sharing

Copy URL

Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

wintaylor2.1/COMDLG32.dll

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

wintaylor2.1/COMDLG32.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

wintaylor2.1/Programs/HexEdit.exe

Resource

win7-20231023-en

upx

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

wintaylor2.1/Programs/HexEdit.exe

Resource

win10v2004-20231023-en

upx

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

wintaylor2.1/Programs/Imager/ADIsoDLL.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

wintaylor2.1/Programs/Imager/ADIsoDLL.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

wintaylor2.1/Programs/Imager/FTKImager.exe

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

wintaylor2.1/Programs/Imager/FTKImager.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

wintaylor2.1/Programs/Imager/IsoBuster.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

wintaylor2.1/Programs/Imager/IsoBuster.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

wintaylor2.1/Programs/Imager/MD5Remote.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

wintaylor2.1/Programs/Imager/MD5Remote.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

wintaylor2.1/Programs/Imager/adencrypt.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

wintaylor2.1/Programs/Imager/adencrypt.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll

Resource

win7-20231025-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll

Resource

win7-20231025-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll

Resource

win7-20231025-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

wintaylor2.1/Programs/Imager/cximage.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

wintaylor2.1/Programs/Imager/cximage.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf

Resource

win10v2004-20231023-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral31

Sample

wintaylor2.1/Programs/Imager/icudt40.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

wintaylor2.1/Programs/Imager/icudt40.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll
Size

12KB
MD5

1ad8ef7baba7dd862cd5d13df6c2677b
SHA1

81ad6243177553019ebad0eed09f44a329c45cf4
SHA256

1f1fdec25884181785bc8f457f3096a107cace9bc55b3051d7ed8a2ac7647a4c
SHA512

efe5bf8e0a88d7f4d42c66f565946cb866cc40ad7135b1b26425767ecb52bdbb46f063b3a036a888364913e6a31882effaa7bb2227029f24eb1e66ad4232e944
SSDEEP

192:0VKoJ2JJ1k8PilpaOxxTrj/6LgQdNVfzEK0ZaOu3XyEqxSpevdT:0ku271P8agTrj/IB+aOyihSAVT

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 1424	2344	rundll32.exe	29
PID 2344 wrote to memory of 1424	2344	rundll32.exe	29
PID 2344 wrote to memory of 1424	2344	rundll32.exe	29
PID 2344 wrote to memory of 1424	2344	rundll32.exe	29
PID 2344 wrote to memory of 1424	2344	rundll32.exe	29
PID 2344 wrote to memory of 1424	2344	rundll32.exe	29
PID 2344 wrote to memory of 1424	2344	rundll32.exe	29

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\wintaylor2.1\Programs\Imager\boost_system-vc90-mt-1_39.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\wintaylor2.1\Programs\Imager\boost_system-vc90-mt-1_39.dll,#1
  2⤵
  PID:1424

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads