a815471df3a9d9700c63fecc246ae7f024288dbf7231937fb53a860064265479

Submit
Reports

Overview

overview

Static

static

IDA-Pro-7....ida.js

windows7-x64

IDA-Pro-7....ida.js

windows10-2004-x64

IDA-Pro-7....le.dll

windows7-x64

IDA-Pro-7....le.dll

windows10-2004-x64

IDA-Pro-7....ng.dll

windows7-x64

IDA-Pro-7....ng.dll

windows10-2004-x64

IDA-Pro-7....rf.dll

windows7-x64

IDA-Pro-7....rf.dll

windows10-2004-x64

IDA-Pro-7....t3_x64

ubuntu-18.04-amd64

IDA-Pro-7....t3_x86

ubuntu-18.04-amd64

IDA-Pro-7...._armv7

debian-9-armhf

IDA-Pro-7...._armv8

ubuntu-18.04-amd64

IDA-Pro-7...._armv8

debian-9-armhf

IDA-Pro-7...._armv8

debian-9-mips

IDA-Pro-7...._armv8

debian-9-mipsel

IDA-Pro-7....owerpc

ubuntu-18.04-amd64

IDA-Pro-7....owerpc

debian-9-armhf

IDA-Pro-7....owerpc

debian-9-mips

IDA-Pro-7....owerpc

debian-9-mipsel

IDA-Pro-7....ey_x64

ubuntu-18.04-amd64

IDA-Pro-7....in.exe

windows7-x64

IDA-Pro-7....in.exe

windows10-2004-x64

IDA-Pro-7....ey_x86

ubuntu-18.04-amd64

IDA-Pro-7....86_cpp

ubuntu-18.04-amd64

IDA-Pro-7....le1.py

ubuntu-18.04-amd64

IDA-Pro-7....le1.py

debian-9-armhf

IDA-Pro-7....le1.py

debian-9-mips

IDA-Pro-7....le1.py

debian-9-mipsel

IDA-Pro-7....le2.py

ubuntu-18.04-amd64

IDA-Pro-7....le2.py

debian-9-armhf

IDA-Pro-7....le2.py

debian-9-mips

IDA-Pro-7....le2.py

debian-9-mipsel

Analysis

max time kernel
120s
max time network
135s
platform
windows7_x64
resource
win7-20231201-en
resource tags

arch:x64arch:x86image:win7-20231201-enlocale:en-usos:windows7-x64system
submitted
14-12-2023 03:42

Sharing

Copy URL

Twitter E-mail

Static task

static1

6 signatures

Behavioral task

behavioral1

Sample

IDA-Pro-7.7-main/idc/ida.js

Resource

win7-20231025-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

IDA-Pro-7.7-main/idc/ida.js

Resource

win10v2004-20231127-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

IDA-Pro-7.7-main/libSwiftDemangle.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

IDA-Pro-7.7-main/libSwiftDemangle.dll

Resource

win10v2004-20231127-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

IDA-Pro-7.7-main/libclang.dll

Resource

win7-20231201-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

IDA-Pro-7.7-main/libclang.dll

Resource

win10v2004-20231127-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

IDA-Pro-7.7-main/libdwarf.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

IDA-Pro-7.7-main/libdwarf.dll

Resource

win10v2004-20231127-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/examples/signal_int3_x64

Resource

ubuntu1804-amd64-20231213-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/examples/signal_int3_x86

Resource

ubuntu1804-amd64-20231130-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_armv7

Resource

debian9-armhf-20231213-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_armv8

Resource

ubuntu1804-amd64-20231213-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_armv8

Resource

debian9-armhf-20231213-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_armv8

Resource

debian9-mipsbe-20231130-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_armv8

Resource

debian9-mipsel-20231213-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_powerpc

Resource

ubuntu1804-amd64-20231213-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_powerpc

Resource

debian9-armhf-20231213-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_powerpc

Resource

debian9-mipsbe-20231130-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_powerpc

Resource

debian9-mipsel-20231213-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_x64

Resource

ubuntu1804-amd64-20231213-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_x64_win.exe

Resource

win7-20231130-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_x64_win.exe

Resource

win10v2004-20231130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_x86

Resource

ubuntu1804-amd64-20231130-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

IDA-Pro-7.7-main/plugins/BinCAT/doc/get_key/get_key_x86_cpp

Resource

ubuntu1804-amd64-20231213-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

IDA-Pro-7.7-main/plugins/diaphora/hooks/hooks_example1.py

Resource

ubuntu1804-amd64-20231213-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

IDA-Pro-7.7-main/plugins/diaphora/hooks/hooks_example1.py

Resource

debian9-armhf-20231130-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

IDA-Pro-7.7-main/plugins/diaphora/hooks/hooks_example1.py

Resource

debian9-mipsbe-20231213-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

IDA-Pro-7.7-main/plugins/diaphora/hooks/hooks_example1.py

Resource

debian9-mipsel-20231213-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

IDA-Pro-7.7-main/plugins/diaphora/hooks/hooks_example2.py

Resource

ubuntu1804-amd64-20231130-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

IDA-Pro-7.7-main/plugins/diaphora/hooks/hooks_example2.py

Resource

debian9-armhf-20231213-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

IDA-Pro-7.7-main/plugins/diaphora/hooks/hooks_example2.py

Resource

debian9-mipsbe-20231213-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

IDA-Pro-7.7-main/plugins/diaphora/hooks/hooks_example2.py

Resource

debian9-mipsel-20231213-en

debian-9-mipsel

0 signatures

150 seconds

Report Analysis Logs

General

Target

IDA-Pro-7.7-main/libclang.dll
Size

20.1MB
MD5

7c6ba9c768dc446dec1ecb3b91d70ae0
SHA1

e0841cd931ec39bc7148626e6bba5cb0903040a9
SHA256

a75780ed8ebc4e16d3e785590ba2f1ff10e837597a8e6e876f7f8e42658261fc
SHA512

889e11a55176a929138fe35efec0467b3785b269d0d3738fca8709fbfc6ea60fd84b1bd0ec4acd198fe95db38d64501d26a90cd1ea362d65f8de21df7b38a206
SSDEEP

393216:B+YZsFnX5hmFxNHIGBnEVlMcd2DG2NvWMQybDnKXPAms:pK42ycd2DG2NvWMQybDnKXPA

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 2944	2108	rundll32.exe	28
PID 2108 wrote to memory of 2944	2108	rundll32.exe	28
PID 2108 wrote to memory of 2944	2108	rundll32.exe	28

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\IDA-Pro-7.7-main\libclang.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2108 -s 120
  2⤵
  PID:2944

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads