Overview
overview
7Static
static
3AxInterop.WMPLib.dll
windows10-1703-x64
1AxInterop.WMPLib.dll
windows10-2004-x64
1AxInterop.WMPLib.dll
windows11-21h2-x64
1Interop.WMPLib.dll
windows10-1703-x64
1Interop.WMPLib.dll
windows10-2004-x64
1Interop.WMPLib.dll
windows11-21h2-x64
1SLAYER Lee....7.exe
windows10-1703-x64
7SLAYER Lee....7.exe
windows10-2004-x64
7SLAYER Lee....7.exe
windows11-21h2-x64
7SkinSoft.V...er.dll
windows10-1703-x64
1SkinSoft.V...er.dll
windows10-2004-x64
1SkinSoft.V...er.dll
windows11-21h2-x64
1xNet.dll
windows10-1703-x64
1xNet.dll
windows10-2004-x64
1xNet.dll
windows11-21h2-x64
1Analysis
-
max time kernel
144s -
max time network
156s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system -
submitted
23/12/2023, 22:38
Static task
static1
Behavioral task
behavioral1
Sample
AxInterop.WMPLib.dll
Resource
win10-20231220-en
Behavioral task
behavioral2
Sample
AxInterop.WMPLib.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
AxInterop.WMPLib.dll
Resource
win11-20231215-en
Behavioral task
behavioral4
Sample
Interop.WMPLib.dll
Resource
win10-20231215-en
Behavioral task
behavioral5
Sample
Interop.WMPLib.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral6
Sample
Interop.WMPLib.dll
Resource
win11-20231215-en
Behavioral task
behavioral7
Sample
SLAYER Leecher v0.7.exe
Resource
win10-20231215-en
Behavioral task
behavioral8
Sample
SLAYER Leecher v0.7.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
SLAYER Leecher v0.7.exe
Resource
win11-20231215-en
Behavioral task
behavioral10
Sample
SkinSoft.VisualStyler.dll
Resource
win10-20231215-en
Behavioral task
behavioral11
Sample
SkinSoft.VisualStyler.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral12
Sample
SkinSoft.VisualStyler.dll
Resource
win11-20231215-en
Behavioral task
behavioral13
Sample
xNet.dll
Resource
win10-20231215-en
Behavioral task
behavioral14
Sample
xNet.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
xNet.dll
Resource
win11-20231215-en
General
-
Target
SLAYER Leecher v0.7.exe
-
Size
6.6MB
-
MD5
aa0b6211f5245f25392b74fdbab048eb
-
SHA1
05c37446aca08847a2688257d0fb138f560b4db2
-
SHA256
74cb827e0324e02bae1b2632b624ff84bd4bd54b796bb046fa27f557ca8f8674
-
SHA512
97e44da681f5b7db132cd37b1a6305f45d5ec546a23ae3f55f8a8cd214e5c76d22947d12a844767c88fc1844f297f7ce7a85569859286b3b5816144979d05176
-
SSDEEP
196608:D15/cj6W2xcU3DNGqNFlVMHa2X9FwKMhU+/Pr:S1tU3DNGIUa2NFYU+L
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1720 SLAYER Leecher v0.7.exe -
Suspicious behavior: EnumeratesProcesses 32 IoCs
pid Process 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe 1720 SLAYER Leecher v0.7.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1720 SLAYER Leecher v0.7.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
67KB
MD54d9943a0adc1a3bd1472bdbab649a436
SHA1f0f36e014a71e21e629cabaa835f39a4e775e092
SHA25687dd71ac71bca50d9f1179215bbc4a25783c6a959def5c1850683eb41f6b0322
SHA51221766452cd53a2344c321b042984a08bcb46dac5e2b06dcd25f1a740e4018cb0f90d39b95414febd76d4c1447efc0dcae6dfa1ee176fdfab654a4efd2e705492