Overview
overview
10Static
static
101.exe
windows7-x64
1400.exe
windows7-x64
10Chase_Bank...or.exe
windows7-x64
10ChromeSoft.exe
windows7-x64
7Fake Windo...er.exe
windows7-x64
4Injector(v_5.24).exe
windows7-x64
8RCE.exe
windows7-x64
10TemD.exe
windows7-x64
10best.exe
windows7-x64
10btf.exe
windows7-x64
8build.exe
windows7-x64
6crypted.exe
windows7-x64
1download.exe
windows7-x64
7dp.exe
windows7-x64
7etbnoc.exe
windows7-x64
1fran.exe
windows7-x64
10fud.exe
windows7-x64
1gift_generator.exe
windows7-x64
7lol.exe
windows7-x64
10mt20200012.exe
windows7-x64
1nopax.exe
windows7-x64
10porn.jpg.exe
windows7-x64
1putty.exe
windows7-x64
10t.exe
windows7-x64
10vnc.exe
windows7-x64
7yk.exe
windows7-x64
10zztop.exe
windows7-x64
1Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231130-en -
resource tags
arch:x64arch:x86image:win7-20231130-enlocale:en-usos:windows7-x64system -
submitted
14/12/2023, 01:47
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
400.exe
Resource
win7-20231130-en
Behavioral task
behavioral3
Sample
Chase_Bank_Transaction_Authenticator.exe
Resource
win7-20231201-en
Behavioral task
behavioral4
Sample
ChromeSoft.exe
Resource
win7-20231130-en
Behavioral task
behavioral5
Sample
Fake Windows Live Messenger.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Injector(v_5.24).exe
Resource
win7-20231023-en
Behavioral task
behavioral7
Sample
RCE.exe
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
TemD.exe
Resource
win7-20231025-en
Behavioral task
behavioral9
Sample
best.exe
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
btf.exe
Resource
win7-20231130-en
Behavioral task
behavioral11
Sample
build.exe
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
crypted.exe
Resource
win7-20231201-en
Behavioral task
behavioral13
Sample
download.exe
Resource
win7-20231130-en
Behavioral task
behavioral14
Sample
dp.exe
Resource
win7-20231129-en
Behavioral task
behavioral15
Sample
etbnoc.exe
Resource
win7-20231023-en
Behavioral task
behavioral16
Sample
fran.exe
Resource
win7-20231130-en
Behavioral task
behavioral17
Sample
fud.exe
Resource
win7-20231023-en
Behavioral task
behavioral18
Sample
gift_generator.exe
Resource
win7-20231129-en
Behavioral task
behavioral19
Sample
lol.exe
Resource
win7-20231130-en
Behavioral task
behavioral20
Sample
mt20200012.exe
Resource
win7-20231020-en
Behavioral task
behavioral21
Sample
nopax.exe
Resource
win7-20231025-en
Behavioral task
behavioral22
Sample
porn.jpg.exe
Resource
win7-20231020-en
Behavioral task
behavioral23
Sample
putty.exe
Resource
win7-20231201-en
Behavioral task
behavioral24
Sample
t.exe
Resource
win7-20231023-en
Behavioral task
behavioral25
Sample
vnc.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
yk.exe
Resource
win7-20231020-en
Behavioral task
behavioral27
Sample
zztop.exe
Resource
win7-20231023-en
General
-
Target
ChromeSoft.exe
-
Size
991KB
-
MD5
35a9b0b465f5518c5ede57b5a61e96bd
-
SHA1
99870ddf8052eebf53925238510bda22a0666a19
-
SHA256
44f0c8410f5308e7b9e23f056611997c4e3152d3a4f029bce26f6dae1fbc067f
-
SHA512
49bb9ac046c4f6d597c2cb3446defc179eab25f594cd30d6ed81429fef95998838c3a321ff34410a3bd10a73b3c39428deff03617cf2865cae9322ee0c1df50a
-
SSDEEP
24576:TUlZA/teq/PTCzG5hPSw24aSeNc5xnPB9Mb7u2mQHpep:TYZKtemTCC5h6J4QNcfPBub7Lmb
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/2112-0-0x0000000000400000-0x0000000000522000-memory.dmp upx behavioral4/memory/2112-1-0x0000000000400000-0x0000000000522000-memory.dmp upx behavioral4/memory/2112-4-0x0000000000400000-0x0000000000522000-memory.dmp upx behavioral4/memory/2112-7-0x0000000000400000-0x0000000000522000-memory.dmp upx behavioral4/memory/2112-13-0x0000000000400000-0x0000000000522000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2112 ChromeSoft.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2112 ChromeSoft.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2112 ChromeSoft.exe