6c0e868e5f7221fd942251784f8aad1e0da1b0b6abbbc52985845d8c1c7a316d

Submit
Reports

Overview

overview

Static

static

GD 2.11 pa...nt.exe

windows7-x64

GD 2.11 pa...nt.exe

windows10-2004-x64

GD 2.11 pa...ep.ps1

windows7-x64

GD 2.11 pa...ep.ps1

windows10-2004-x64

GD 2.11 pa...64.exe

windows7-x64

GD 2.11 pa...64.exe

windows10-2004-x64

GD 2.11 pa...86.exe

windows7-x64

GD 2.11 pa...86.exe

windows10-2004-x64

GD 2.11 pa...64.exe

windows7-x64

GD 2.11 pa...64.exe

windows10-2004-x64

GD 2.11 pa...86.exe

windows7-x64

GD 2.11 pa...86.exe

windows10-2004-x64

GD 2.11 pa...od.dll

windows7-x64

GD 2.11 pa...od.dll

windows10-2004-x64

GD 2.11 pa...32.dll

windows7-x64

GD 2.11 pa...32.dll

windows10-2004-x64

GD 2.11 pa...nv.dll

windows7-x64

GD 2.11 pa...nv.dll

windows10-2004-x64

GD 2.11 pa...ns.dll

windows7-x64

GD 2.11 pa...ns.dll

windows10-2004-x64

GD 2.11 pa...2d.dll

windows7-x64

GD 2.11 pa...2d.dll

windows10-2004-x64

GD 2.11 pa...rl.dll

windows7-x64

GD 2.11 pa...rl.dll

windows10-2004-x64

GD 2.11 pa...ff.dll

windows7-x64

GD 2.11 pa...ff.dll

windows10-2004-x64

GD 2.11 pa...00.dll

windows7-x64

GD 2.11 pa...00.dll

windows10-2004-x64

GD 2.11 pa...20.dll

windows7-x64

GD 2.11 pa...20.dll

windows10-2004-x64

GD 2.11 pa...40.dll

windows7-x64

GD 2.11 pa...40.dll

windows10-2004-x64

Analysis

max time kernel
122s
max time network
135s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
09-11-2023 01:15

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

GD 2.11 paint/GD Paint.exe

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

GD 2.11 paint/GD Paint.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

GD 2.11 paint/Resources/xStep.ps1

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

GD 2.11 paint/Resources/xStep.ps1

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x64.exe

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x64.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x86.exe

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x86.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x64.exe

Resource

win7-20231025-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x64.exe

Resource

win10v2004-20231025-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x86.exe

Resource

win7-20231023-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x86.exe

Resource

win10v2004-20231020-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

GD 2.11 paint/fmod.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

GD 2.11 paint/fmod.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

GD 2.11 paint/glew32.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

GD 2.11 paint/glew32.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

GD 2.11 paint/iconv.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

GD 2.11 paint/iconv.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

GD 2.11 paint/libExtensions.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

GD 2.11 paint/libExtensions.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

GD 2.11 paint/libcocos2d.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

GD 2.11 paint/libcocos2d.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

GD 2.11 paint/libcurl.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

GD 2.11 paint/libcurl.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

GD 2.11 paint/libtiff.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

GD 2.11 paint/libtiff.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

GD 2.11 paint/msvcp100.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

GD 2.11 paint/msvcp100.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

GD 2.11 paint/msvcp120.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

GD 2.11 paint/msvcp120.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

GD 2.11 paint/msvcp140.dll

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

GD 2.11 paint/msvcp140.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

GD 2.11 paint/GD Paint.exe
Size

6.5MB
MD5

fdf231f7dc5d1c57e023f4148227edae
SHA1

dbb13500a972217b801d5d7656a19ebff1a24524
SHA256

a2b2424171870437cd55743572dc717982a0b2f33abe4f6e1ff7bc3cafb9ab3b
SHA512

5a133c3318e694e699428f9e9c7a94e14e7bcd4aa997f4ce52a66bc70d527393a037e93183fde230bdaffd5b92fc9a6a209bb5c63312a12c38356d206eae7813
SSDEEP

49152:Bug8dPHi2XXq8dWlHIuKO77iX+4kVoVNG+w6xfS+w6xfSExfSRaTQAYjzDTjE:QDnq8W9KO7e2GVNVVxfS+VxfSgfSR

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2864 2204 WerFault.exe GD Paint.exe

pid	pid_target	process	target process
2864	2204	WerFault.exe	GD Paint.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

GD Paint.exe

description	pid	process	target process
PID 2204 wrote to memory of 2864	2204	GD Paint.exe	WerFault.exe
PID 2204 wrote to memory of 2864	2204	GD Paint.exe	WerFault.exe
PID 2204 wrote to memory of 2864	2204	GD Paint.exe	WerFault.exe
PID 2204 wrote to memory of 2864	2204	GD Paint.exe	WerFault.exe

Processes

C:\Users\Admin\AppData\Local\Temp\GD 2.11 paint\GD Paint.exe
"C:\Users\Admin\AppData\Local\Temp\GD 2.11 paint\GD Paint.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 320
2⤵
- Program crash
PID:2864

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads