Overview
overview
10Static
static
10wintaylor2...32.dll
windows7-x64
1wintaylor2...32.dll
windows10-2004-x64
1wintaylor2...it.exe
windows7-x64
7wintaylor2...it.exe
windows10-2004-x64
7wintaylor2...LL.dll
windows7-x64
3wintaylor2...LL.dll
windows10-2004-x64
3wintaylor2...er.exe
windows7-x64
1wintaylor2...er.exe
windows10-2004-x64
1wintaylor2...er.dll
windows7-x64
6wintaylor2...er.dll
windows10-2004-x64
6wintaylor2...te.dll
windows7-x64
1wintaylor2...te.dll
windows10-2004-x64
1wintaylor2...32.dll
windows7-x64
3wintaylor2...32.dll
windows10-2004-x64
3wintaylor2...pt.dll
windows7-x64
1wintaylor2...pt.dll
windows10-2004-x64
1wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...39.dll
windows7-x64
1wintaylor2...39.dll
windows10-2004-x64
1wintaylor2...39.dll
windows7-x64
3wintaylor2...39.dll
windows10-2004-x64
3wintaylor2...ge.dll
windows7-x64
3wintaylor2...ge.dll
windows10-2004-x64
3wintaylor2...de.pdf
windows7-x64
1wintaylor2...de.pdf
windows10-2004-x64
1wintaylor2...40.dll
windows7-x64
1wintaylor2...40.dll
windows10-2004-x64
1Analysis
-
max time kernel
173s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
07/11/2023, 14:08
Behavioral task
behavioral1
Sample
wintaylor2.1/COMDLG32.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
wintaylor2.1/COMDLG32.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
wintaylor2.1/Programs/HexEdit.exe
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
wintaylor2.1/Programs/HexEdit.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
wintaylor2.1/Programs/Imager/ADIsoDLL.dll
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
wintaylor2.1/Programs/Imager/ADIsoDLL.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
wintaylor2.1/Programs/Imager/FTKImager.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
wintaylor2.1/Programs/Imager/FTKImager.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
wintaylor2.1/Programs/Imager/IsoBuster.dll
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
wintaylor2.1/Programs/Imager/IsoBuster.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
wintaylor2.1/Programs/Imager/MD5Remote.dll
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
wintaylor2.1/Programs/Imager/MD5Remote.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral13
Sample
wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
wintaylor2.1/Programs/Imager/ProfUIS284ad32.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
wintaylor2.1/Programs/Imager/adencrypt.dll
Resource
win7-20231023-en
Behavioral task
behavioral16
Sample
wintaylor2.1/Programs/Imager/adencrypt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
wintaylor2.1/Programs/Imager/boost_date_time-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll
Resource
win7-20231025-en
Behavioral task
behavioral20
Sample
wintaylor2.1/Programs/Imager/boost_filesystem-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
wintaylor2.1/Programs/Imager/boost_regex-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll
Resource
win7-20231025-en
Behavioral task
behavioral24
Sample
wintaylor2.1/Programs/Imager/boost_system-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
wintaylor2.1/Programs/Imager/boost_thread-vc90-mt-1_39.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral27
Sample
wintaylor2.1/Programs/Imager/cximage.dll
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
wintaylor2.1/Programs/Imager/cximage.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
wintaylor2.1/Programs/Imager/icudt40.dll
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
wintaylor2.1/Programs/Imager/icudt40.dll
Resource
win10v2004-20231023-en
General
-
Target
wintaylor2.1/Programs/Imager/help/enu/ImagerUsersGuide.pdf
-
Size
497KB
-
MD5
2aab2678fdc4277aed6def001bd1dd9f
-
SHA1
e6539b55f1c1346948f44029d8941457e79c192e
-
SHA256
b8d9f9872828db6aca5b5957007615a5a1a6d32e957ce2d283a7f27b6a0596f1
-
SHA512
a19a74a212609a16286b6068a930d414774a69c89642eea1df028fd053a50bf2578f141c8440d3e32f4d7205bbbd7611aa577ccffd01d8993dd23c2416272b80
-
SSDEEP
6144:SOGCx/Kb41ag7yWAW4bPOPg2izBJgDuzivkB5+OpQTa6PzKPhARStAv5:1dOy0WAHPM5izBwAh5lQTR2hA0KB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1524 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1524 AcroRd32.exe 1524 AcroRd32.exe 1524 AcroRd32.exe 1524 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\wintaylor2.1\Programs\Imager\help\enu\ImagerUsersGuide.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1524
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58c0a0b47adc7726a271b71ec1fe808b8
SHA1fe663bd218cc021f557a14ad1c70c0f79f625c00
SHA25602617fe57ad72a3116213f9a1dad1ed5fbce8adf04e16fac7bf6ad4d4974d926
SHA512612db4ced258dc1038a1a63bbc5890a9816d81a8cd2adae2f0610bb952b77d22ae35dfe5150b3e822584e824bfc9cf6decbf87c70baaf2efa0cceb12598dfcf5