Overview
overview
10Static
static
10COMDLG32.dll
windows7-x64
1COMDLG32.dll
windows10-2004-x64
1Programs/HexEdit.exe
windows7-x64
7Programs/HexEdit.exe
windows10-2004-x64
7Programs/I...LL.dll
windows7-x64
3Programs/I...LL.dll
windows10-2004-x64
3Programs/I...er.exe
windows7-x64
1Programs/I...er.exe
windows10-2004-x64
1Programs/I...er.dll
windows7-x64
6Programs/I...er.dll
windows10-2004-x64
6Programs/I...te.dll
windows7-x64
1Programs/I...te.dll
windows10-2004-x64
1Programs/I...32.dll
windows7-x64
3Programs/I...32.dll
windows10-2004-x64
3Programs/I...pt.dll
windows7-x64
1Programs/I...pt.dll
windows10-2004-x64
1Programs/I...39.dll
windows7-x64
3Programs/I...39.dll
windows10-2004-x64
3Programs/I...39.dll
windows7-x64
3Programs/I...39.dll
windows10-2004-x64
3Programs/I...39.dll
windows7-x64
3Programs/I...39.dll
windows10-2004-x64
3Programs/I...39.dll
windows7-x64
1Programs/I...39.dll
windows10-2004-x64
1Programs/I...39.dll
windows7-x64
3Programs/I...39.dll
windows10-2004-x64
3Programs/I...ge.dll
windows7-x64
3Programs/I...ge.dll
windows10-2004-x64
3Programs/I...de.pdf
windows7-x64
1Programs/I...de.pdf
windows10-2004-x64
1Programs/I...40.dll
windows7-x64
1Programs/I...40.dll
windows10-2004-x64
1Analysis
-
max time kernel
246s -
max time network
291s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system -
submitted
07-11-2023 14:11
Behavioral task
behavioral1
Sample
COMDLG32.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
COMDLG32.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
Programs/HexEdit.exe
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
Programs/HexEdit.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
Programs/Imager/ADIsoDLL.dll
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
Programs/Imager/ADIsoDLL.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
Programs/Imager/FTKImager.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
Programs/Imager/FTKImager.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
Programs/Imager/IsoBuster.dll
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
Programs/Imager/IsoBuster.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
Programs/Imager/MD5Remote.dll
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
Programs/Imager/MD5Remote.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
Programs/Imager/ProfUIS284ad32.dll
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
Programs/Imager/ProfUIS284ad32.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
Programs/Imager/adencrypt.dll
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
Programs/Imager/adencrypt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
Programs/Imager/boost_date_time-vc90-mt-1_39.dll
Resource
win7-20231023-en
Behavioral task
behavioral18
Sample
Programs/Imager/boost_date_time-vc90-mt-1_39.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
Programs/Imager/boost_filesystem-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
Programs/Imager/boost_filesystem-vc90-mt-1_39.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral21
Sample
Programs/Imager/boost_regex-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
Programs/Imager/boost_regex-vc90-mt-1_39.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
Programs/Imager/boost_system-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
Programs/Imager/boost_system-vc90-mt-1_39.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral25
Sample
Programs/Imager/boost_thread-vc90-mt-1_39.dll
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
Programs/Imager/boost_thread-vc90-mt-1_39.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
Programs/Imager/cximage.dll
Resource
win7-20231025-en
Behavioral task
behavioral28
Sample
Programs/Imager/cximage.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
Programs/Imager/help/enu/ImagerUsersGuide.pdf
Resource
win7-20231025-en
Behavioral task
behavioral30
Sample
Programs/Imager/help/enu/ImagerUsersGuide.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral31
Sample
Programs/Imager/icudt40.dll
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
Programs/Imager/icudt40.dll
Resource
win10v2004-20231020-en
General
-
Target
Programs/Imager/help/enu/ImagerUsersGuide.pdf
-
Size
497KB
-
MD5
2aab2678fdc4277aed6def001bd1dd9f
-
SHA1
e6539b55f1c1346948f44029d8941457e79c192e
-
SHA256
b8d9f9872828db6aca5b5957007615a5a1a6d32e957ce2d283a7f27b6a0596f1
-
SHA512
a19a74a212609a16286b6068a930d414774a69c89642eea1df028fd053a50bf2578f141c8440d3e32f4d7205bbbd7611aa577ccffd01d8993dd23c2416272b80
-
SSDEEP
6144:SOGCx/Kb41ag7yWAW4bPOPg2izBJgDuzivkB5+OpQTa6PzKPhARStAv5:1dOy0WAHPM5izBwAh5lQTR2hA0KB
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2280 AcroRd32.exe 2280 AcroRd32.exe 2280 AcroRd32.exe 2280 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5353e741c79d257c40da0773f4cd48edb
SHA16079e882b21b8a9d9b992622ac7723a2ba03e989
SHA2562c3e09138d39e46cb0320736f8f1cca12c22e4a8bdf8d1caaf3b0602367663fe
SHA512fb406a4bf7d47307f0e3f3a2151b389710ea2ec194d7bca40c43c79776e744cd553e20a11714aeddd8737a69679f89d7a8c0543442bd8f5b4d6b25b9c8748e47