bd3bcd0bd245b41f8237bea5382f27dd6f699f5827a87ff559311c014a97b41b

Submit
Reports

Overview

overview

Static

static

Construct ...on.exe

windows7-x64

Construct ...on.exe

windows10-2004-x64

Construct ...er.dll

windows7-x64

Construct ...er.dll

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Analysis

max time kernel
60s
max time network
32s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
16-11-2023 22:10

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Construct 2 - Overdrive Edition (Arquives)/Construct 2 - Overdrive Edition.exe

Resource

win7-20231023-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Construct 2 - Overdrive Edition (Arquives)/Construct 2 - Overdrive Edition.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

Construct 2 - Overdrive Edition (Arquives)/SciLexer.dll

Resource

win7-20231025-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Construct 2 - Overdrive Edition (Arquives)/SciLexer.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/common.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/common.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/edittime.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/edittime.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/runtime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/runtime.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/common.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/common.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/edittime.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/edittime.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/runtime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/runtime.js

Resource

win10v2004-20231025-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/common.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/common.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/edittime.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/edittime.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/runtime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/runtime.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/common.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/common.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/edittime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/edittime.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/runtime.js

Resource

win7-20231025-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/runtime.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Carlos_Campana_Hadouken-Imput/common.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Carlos_Campana_Hadouken-Imput/common.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Carlos_Campana_Hadouken-Imput/edittime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Carlos_Campana_Hadouken-Imput/edittime.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Construct 2 - Overdrive Edition (Arquives)/SciLexer.dll
Size

1.1MB
MD5

6205933d876c9e208cfa9ce0a7ac8588
SHA1

5503774b1db73047bfcf89f4546f95a0e4197339
SHA256

0490917af7ad9385ca5f11b530300188e34de11357d86b2830ce6b052fa3189b
SHA512

0f7824fe52fa8f093df5cf80a867f5cae9a70c25fff31c1833252685669177bf3060cf523cad634a3724fa5ef733e13ec00eada6420c069609234bdee200062a
SSDEEP

24576:mL68F44edfy9Hb0/bN7XRKi1NTlyqkNEXGsu:mFF44EgHb0Jjsi1N5kOGsu

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2720 wrote to memory of 2744	2720	rundll32.exe	29
PID 2720 wrote to memory of 2744	2720	rundll32.exe	29
PID 2720 wrote to memory of 2744	2720	rundll32.exe	29

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Construct 2 - Overdrive Edition (Arquives)\SciLexer.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2720
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2720 -s 116
  2⤵
  PID:2744

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads