6c0e868e5f7221fd942251784f8aad1e0da1b0b6abbbc52985845d8c1c7a316d

Submit
Reports

Overview

overview

Static

static

GD 2.11 pa...nt.exe

windows7-x64

GD 2.11 pa...nt.exe

windows10-2004-x64

GD 2.11 pa...ep.ps1

windows7-x64

GD 2.11 pa...ep.ps1

windows10-2004-x64

GD 2.11 pa...64.exe

windows7-x64

GD 2.11 pa...64.exe

windows10-2004-x64

GD 2.11 pa...86.exe

windows7-x64

GD 2.11 pa...86.exe

windows10-2004-x64

GD 2.11 pa...64.exe

windows7-x64

GD 2.11 pa...64.exe

windows10-2004-x64

GD 2.11 pa...86.exe

windows7-x64

GD 2.11 pa...86.exe

windows10-2004-x64

GD 2.11 pa...od.dll

windows7-x64

GD 2.11 pa...od.dll

windows10-2004-x64

GD 2.11 pa...32.dll

windows7-x64

GD 2.11 pa...32.dll

windows10-2004-x64

GD 2.11 pa...nv.dll

windows7-x64

GD 2.11 pa...nv.dll

windows10-2004-x64

GD 2.11 pa...ns.dll

windows7-x64

GD 2.11 pa...ns.dll

windows10-2004-x64

GD 2.11 pa...2d.dll

windows7-x64

GD 2.11 pa...2d.dll

windows10-2004-x64

GD 2.11 pa...rl.dll

windows7-x64

GD 2.11 pa...rl.dll

windows10-2004-x64

GD 2.11 pa...ff.dll

windows7-x64

GD 2.11 pa...ff.dll

windows10-2004-x64

GD 2.11 pa...00.dll

windows7-x64

GD 2.11 pa...00.dll

windows10-2004-x64

GD 2.11 pa...20.dll

windows7-x64

GD 2.11 pa...20.dll

windows10-2004-x64

GD 2.11 pa...40.dll

windows7-x64

GD 2.11 pa...40.dll

windows10-2004-x64

Analysis

max time kernel
107s
max time network
198s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
09-11-2023 01:15

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

GD 2.11 paint/GD Paint.exe

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

GD 2.11 paint/GD Paint.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

GD 2.11 paint/Resources/xStep.ps1

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

GD 2.11 paint/Resources/xStep.ps1

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x64.exe

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x64.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x86.exe

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x86.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x64.exe

Resource

win7-20231025-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x64.exe

Resource

win10v2004-20231025-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x86.exe

Resource

win7-20231023-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x86.exe

Resource

win10v2004-20231020-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

GD 2.11 paint/fmod.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

GD 2.11 paint/fmod.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

GD 2.11 paint/glew32.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

GD 2.11 paint/glew32.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

GD 2.11 paint/iconv.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

GD 2.11 paint/iconv.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

GD 2.11 paint/libExtensions.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

GD 2.11 paint/libExtensions.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

GD 2.11 paint/libcocos2d.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

GD 2.11 paint/libcocos2d.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

GD 2.11 paint/libcurl.dll

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

GD 2.11 paint/libcurl.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

GD 2.11 paint/libtiff.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

GD 2.11 paint/libtiff.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

GD 2.11 paint/msvcp100.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

GD 2.11 paint/msvcp100.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

GD 2.11 paint/msvcp120.dll

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

GD 2.11 paint/msvcp120.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

GD 2.11 paint/msvcp140.dll

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

GD 2.11 paint/msvcp140.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

GD 2.11 paint/msvcp140.dll
Size

612KB
MD5

8d55109b9757f997fce995b2020eb8ff
SHA1

a92330cb5bbec0310f3cfad3ccfde6b7b01cd377
SHA256

83efba3ef0f24b3018cab57a2236c81be61623d7fac5b4ec21666d9eec699bc6
SHA512

9a64a5593fa546d2a3158374f301163c2e9464f48ad95b19e1cdf2601071877bd3fc220272869d82563e588c7dae4ced8ff9930eb6e1056da589d7c1dce6abc7
SSDEEP

12288:HKud5zgdkWhgdq/fazwEQ96d2GYGyQEKZm+jWodEEVmHu:NKqzwEQ9+2D9QEKZm+jWodEE0O

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2236 wrote to memory of 3608	2236	rundll32.exe	WerFault.exe
PID 2236 wrote to memory of 3608	2236	rundll32.exe	WerFault.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\GD 2.11 paint\msvcp140.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2236

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2236 -s 332
2⤵
PID:3608

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads