Analysis
-
max time kernel
149s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29-12-2023 22:56
Behavioral task
behavioral1
Sample
WareHub.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
WareHub.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
WareHub.exe
-
Size
288KB
-
MD5
d098c0bf1c83217584e2e38734627a7f
-
SHA1
4902792181f976bdc8f76f80a42a13d7f34d5714
-
SHA256
ad6e7b84ce21f9670bf8f0a2a980d72363d06ae7213cc495ba9e88fa6da2f511
-
SHA512
ff75c6c334f8e542beeff11464dabbc320bd2b980d2021e6123e9d1f33f4d57fc8fded93280b5c96d91564636222931177bb6d98ea60400612fdc7dd3e9deb44
-
SSDEEP
6144:5/mdjrF9mqUh9C0zA+C/gEMS9WhaCtHhBDuZsGZe2KL8:5/mXTs7SAaqGZf
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2364-0-0x000000013F660000-0x000000013F6F6000-memory.dmp upx behavioral1/memory/2364-2-0x000000013F660000-0x000000013F6F6000-memory.dmp upx -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\IME\warehub.dll WareHub.exe -
Suspicious behavior: EnumeratesProcesses 51 IoCs
pid Process 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe 2364 WareHub.exe