6ec20b583d4e753ca2b304647bfa8dd492a1eb79aa5d68a8d55c205f1e66a717 | Triage

Submit
Reports

Overview

overview

3

Static

static

3

Bios_Utili...OS.exe

windows7-x64

Bios_Utili...OS.exe

windows10-2004-x64

Bios_Utili...de.pdf

windows7-x64

1

Bios_Utili...de.pdf

windows10-2004-x64

1

afuwin32/A...DA.pdf

windows7-x64

1

afuwin32/A...DA.pdf

windows10-2004-x64

1

afuwin32/afuwin.exe

windows7-x64

1

afuwin32/afuwin.exe

windows10-2004-x64

1

afuwin32/a...ui.exe

windows7-x64

1

afuwin32/a...ui.exe

windows10-2004-x64

1

afuwin32/a...32.sys

windows7-x64

1

afuwin32/a...32.sys

windows10-2004-x64

1

afuwin64/A...DA.pdf

windows7-x64

1

afuwin64/A...DA.pdf

windows10-2004-x64

1

afuwin64/a...ui.exe

windows7-x64

1

afuwin64/a...ui.exe

windows10-2004-x64

1

afuwin64/a...64.exe

windows7-x64

1

afuwin64/a...64.exe

windows10-2004-x64

1

afuwin64/a...64.sys

windows7-x64

1

afuwin64/a...64.sys

windows10-2004-x64

1

Analysis

max time kernel
182s
max time network
200s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2023 14:38

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Bios_Utilities/AFU/AFUDOS.exe

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Bios_Utilities/AFU/AFUDOS.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Bios_Utilities/AFU/BIOS Flash Guide.pdf

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

Bios_Utilities/AFU/BIOS Flash Guide.pdf

Resource

win10v2004-20231025-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral5

Sample

afuwin32/AMI_Aptio_AFU_User_Guide_NDA.pdf

Resource

win7-20231025-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

afuwin32/AMI_Aptio_AFU_User_Guide_NDA.pdf

Resource

win10v2004-20231025-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

afuwin32/afuwin.exe

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

afuwin32/afuwin.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

afuwin32/afuwingui.exe

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

afuwin32/afuwingui.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

afuwin32/amifldrv32.sys

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

afuwin32/amifldrv32.sys

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

afuwin64/AMI_Aptio_AFU_User_Guide_NDA.pdf

Resource

win7-20231025-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

afuwin64/AMI_Aptio_AFU_User_Guide_NDA.pdf

Resource

win10v2004-20231023-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral15

Sample

afuwin64/afuwingui.exe

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

afuwin64/afuwingui.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

afuwin64/afuwinx64.exe

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

afuwin64/afuwinx64.exe

Resource

win10v2004-20231025-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

afuwin64/amifldrv64.sys

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

afuwin64/amifldrv64.sys

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

afuwin64/amifldrv64.sys
Size

15KB
MD5

73fc2954829a49fc8eb178b000d10120
SHA1

4040f6974119ff2486f9a0cbd749ce240cbee2aa
SHA256

26ba58c9af9c8a7aebf222f491f786daa0626be44d34f170fea3623d92828e63
SHA512

d4d6529633ffef9c6ce381db44dd4a568514e5d4f5118de1bea76e74c56fd1f4758a3fd3cabe215cbd651296fb818e88529c95270db00452c4dc07b372953137
SSDEEP

384:OfkmSN6aOu0HMt8RMy+Ld3mirILpiV8UHeMjnBjm:Of3S8yCMtuMtLcIILpkY

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\afuwin64\amifldrv64.sys
1⤵
PID:4140
- C:\Users\Admin\AppData\Local\Temp\afuwin64\amifldrv64.sys
  C:\Users\Admin\AppData\Local\Temp\afuwin64\amifldrv64.sys
  2⤵
  PID:2844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2844-0-0x0000000000010000-0x0000000000017000-memory.dmp

Filesize
28KB

Download
memory/2844-1-0x0000000000010000-0x0000000000017000-memory.dmp

Filesize
28KB

Download

© 2018-2024

Terms | Privacy