Overview
overview
7Static
static
3GD 2.11 pa...nt.exe
windows7-x64
3GD 2.11 pa...nt.exe
windows10-2004-x64
3GD 2.11 pa...ep.ps1
windows7-x64
1GD 2.11 pa...ep.ps1
windows10-2004-x64
1GD 2.11 pa...64.exe
windows7-x64
7GD 2.11 pa...64.exe
windows10-2004-x64
7GD 2.11 pa...86.exe
windows7-x64
7GD 2.11 pa...86.exe
windows10-2004-x64
7GD 2.11 pa...64.exe
windows7-x64
7GD 2.11 pa...64.exe
windows10-2004-x64
7GD 2.11 pa...86.exe
windows7-x64
7GD 2.11 pa...86.exe
windows10-2004-x64
7GD 2.11 pa...od.dll
windows7-x64
3GD 2.11 pa...od.dll
windows10-2004-x64
3GD 2.11 pa...32.dll
windows7-x64
3GD 2.11 pa...32.dll
windows10-2004-x64
3GD 2.11 pa...nv.dll
windows7-x64
3GD 2.11 pa...nv.dll
windows10-2004-x64
3GD 2.11 pa...ns.dll
windows7-x64
3GD 2.11 pa...ns.dll
windows10-2004-x64
3GD 2.11 pa...2d.dll
windows7-x64
3GD 2.11 pa...2d.dll
windows10-2004-x64
3GD 2.11 pa...rl.dll
windows7-x64
3GD 2.11 pa...rl.dll
windows10-2004-x64
3GD 2.11 pa...ff.dll
windows7-x64
1GD 2.11 pa...ff.dll
windows10-2004-x64
1GD 2.11 pa...00.dll
windows7-x64
3GD 2.11 pa...00.dll
windows10-2004-x64
3GD 2.11 pa...20.dll
windows7-x64
3GD 2.11 pa...20.dll
windows10-2004-x64
3GD 2.11 pa...40.dll
windows7-x64
1GD 2.11 pa...40.dll
windows10-2004-x64
1Analysis
-
max time kernel
160s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
09-11-2023 01:15
Static task
static1
Behavioral task
behavioral1
Sample
GD 2.11 paint/GD Paint.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
GD 2.11 paint/GD Paint.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
GD 2.11 paint/Resources/xStep.ps1
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
GD 2.11 paint/Resources/xStep.ps1
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x64.exe
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x64.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x86.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x86.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x64.exe
Resource
win7-20231025-en
Behavioral task
behavioral10
Sample
GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x64.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral11
Sample
GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x86.exe
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x86.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
GD 2.11 paint/fmod.dll
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
GD 2.11 paint/fmod.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
GD 2.11 paint/glew32.dll
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
GD 2.11 paint/glew32.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral17
Sample
GD 2.11 paint/iconv.dll
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
GD 2.11 paint/iconv.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
GD 2.11 paint/libExtensions.dll
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
GD 2.11 paint/libExtensions.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
GD 2.11 paint/libcocos2d.dll
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
GD 2.11 paint/libcocos2d.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral23
Sample
GD 2.11 paint/libcurl.dll
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
GD 2.11 paint/libcurl.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
GD 2.11 paint/libtiff.dll
Resource
win7-20231023-en
Behavioral task
behavioral26
Sample
GD 2.11 paint/libtiff.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
GD 2.11 paint/msvcp100.dll
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
GD 2.11 paint/msvcp100.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
GD 2.11 paint/msvcp120.dll
Resource
win7-20231023-en
Behavioral task
behavioral30
Sample
GD 2.11 paint/msvcp120.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
GD 2.11 paint/msvcp140.dll
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
GD 2.11 paint/msvcp140.dll
Resource
win10v2004-20231023-en
General
-
Target
GD 2.11 paint/GD Paint.exe
-
Size
6.5MB
-
MD5
fdf231f7dc5d1c57e023f4148227edae
-
SHA1
dbb13500a972217b801d5d7656a19ebff1a24524
-
SHA256
a2b2424171870437cd55743572dc717982a0b2f33abe4f6e1ff7bc3cafb9ab3b
-
SHA512
5a133c3318e694e699428f9e9c7a94e14e7bcd4aa997f4ce52a66bc70d527393a037e93183fde230bdaffd5b92fc9a6a209bb5c63312a12c38356d206eae7813
-
SSDEEP
49152:Bug8dPHi2XXq8dWlHIuKO77iX+4kVoVNG+w6xfS+w6xfSExfSRaTQAYjzDTjE:QDnq8W9KO7e2GVNVVxfS+VxfSgfSR
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5076 2276 WerFault.exe GD Paint.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\GD 2.11 paint\GD Paint.exe"C:\Users\Admin\AppData\Local\Temp\GD 2.11 paint\GD Paint.exe"1⤵PID:2276
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2276 -s 9482⤵
- Program crash
PID:5076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2276 -ip 22761⤵PID:4480