Static task
static1
Behavioral task
behavioral1
Sample
155ɫվ.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
155ɫվ.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Core Temp Gadget & Addons.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Core Temp Gadget & Addons.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
Core Temp32.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Core Temp32.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Core Temp64.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
Core Temp64.exe
Resource
win10v2004-20231222-en
General
-
Target
225dd6af9e49d1f38e33f6dbffc0dd44
-
Size
458KB
-
MD5
225dd6af9e49d1f38e33f6dbffc0dd44
-
SHA1
a44ae0771149899ad2a49e7f04418541771b58fb
-
SHA256
7baa7fbbc3a647c7980272173dec69233abc3d55aac9b34b82c0394ca8de1917
-
SHA512
b95717d716c002518dd4a0924e51fcfa62f75c620e1ea3cc3caa0a842031e46ce228f5812df4281b05ca3347b64d1ebe40ef9ffe5a7b505b23a26e58725a806d
-
SSDEEP
12288:U3C7O40gZX3I8UXuIhfcLFrBYp3wRFwn8XaPuFVXJb782Q:MC7pbXg+IhULF9YNwRynCaPkXJb7W
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Core Temp32.exe unpack001/Core Temp64.exe
Files
-
225dd6af9e49d1f38e33f6dbffc0dd44.zip
-
155ɫվ.url.url
-
Changes.txt
-
Core Temp Gadget & Addons.url
-
Core Temp32.exe.exe windows:5 windows x86 arch:x86
aacaf69d92d138512956ed8b91b4e1b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_AddMasked
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
InitCommonControlsEx
powrprof
SetSuspendState
gdiplus
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipLoadImageFromFile
GdipAlloc
kernel32
FindResourceW
InterlockedDecrement
lstrcpynW
OpenProcess
SetLastError
GetFileSize
TerminateThread
CreateThread
GetTickCount
GetProcessAffinityMask
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadPriority
SetPriorityClass
GetCurrentThread
WaitForMultipleObjects
ReadFile
GetModuleFileNameA
GetVersion
HeapReAlloc
LCMapStringW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentProcessId
GetFileType
SetHandleCount
DeleteCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
HeapSize
IsProcessorFeaturePresent
MultiByteToWideChar
IsValidCodePage
LoadResource
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetStdHandle
ExitProcess
HeapCreate
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetTimeZoneInformation
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DeleteFileA
RaiseException
DecodePointer
EncodePointer
WideCharToMultiByte
GetDateFormatW
GetTimeFormatW
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
LoadLibraryA
SetEnvironmentVariableA
GetProcessHeap
SetEndOfFile
FreeLibrary
WriteConsoleW
GetLocalTime
GetModuleFileNameW
MulDiv
LockResource
LocalFree
LocalAlloc
DeviceIoControl
FindFirstFileW
CreateMutexW
WaitForSingleObject
CreateFileMappingW
MapViewOfFile
Sleep
CreateFileW
WriteFile
DeleteFileW
OpenMutexW
GetLastError
CloseHandle
ReleaseMutex
GetModuleHandleW
GetVersionExW
GetCurrentProcess
GetOEMCP
LoadLibraryW
CompareStringW
SetEnvironmentVariableW
CreateFileA
GetStringTypeW
user32
PostMessageW
GetWindowTextW
GetClassInfoExW
DrawTextExW
GetSystemMetrics
ReleaseDC
DestroyIcon
FillRect
SystemParametersInfoW
GetWindowThreadProcessId
LoadMenuW
DestroyMenu
GetDialogBaseUnits
SetRectEmpty
MapDialogRect
OffsetRect
CopyRect
GetSysColorBrush
ScreenToClient
CreateDialogParamW
LoadStringW
LoadAcceleratorsW
FindWindowW
IsIconic
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
RegisterClassExW
RegisterWindowMessageW
DefWindowProcW
GetSubMenu
GetCursorPos
TrackPopupMenu
PostQuitMessage
DestroyWindow
DialogBoxParamW
EnableMenuItem
GetMenuState
GetMenu
CheckMenuItem
GetClientRect
SetTimer
KillTimer
AdjustWindowRect
EnumChildWindows
EnableWindow
GetDlgItem
EndDialog
SetWindowTextW
SetWindowLongW
SetWindowPos
CreateWindowExW
SetForegroundWindow
UpdateWindow
GetWindowRect
LoadBitmapW
SendMessageW
InvalidateRect
SendNotifyMessageW
ShowWindow
LoadCursorW
SetCursor
MessageBoxW
GetWindowLongW
GetSysColor
CallWindowProcW
GetDC
ExitWindowsEx
gdi32
CreateBrushIndirect
SetTextAlign
TextOutW
CreateFontW
CreateFontIndirectW
CreateDIBSection
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
DeleteDC
SetTextColor
SetBkColor
GetDeviceCaps
CreateBitmap
comdlg32
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
advapi32
CreateServiceW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GetUserNameW
RegDeleteValueW
StartServiceW
OpenSCManagerW
OpenServiceW
RegOpenKeyExA
RegQueryValueExA
ControlService
DeleteService
CloseServiceHandle
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
shell32
SHGetFileInfoW
Shell_NotifyIconW
ShellExecuteW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantClear
Sections
.text Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Core Temp64.exe.exe windows:5 windows x64 arch:x64
9aa7eb3b5ee6fdcfb00972a76c828559
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ImageList_AddMasked
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
InitCommonControlsEx
powrprof
SetSuspendState
gdiplus
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipLoadImageFromFile
GdipAlloc
kernel32
OpenProcess
FreeLibrary
SetLastError
LoadLibraryW
GetFileSize
TerminateThread
CreateThread
GetTickCount
GetProcessAffinityMask
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadPriority
SetPriorityClass
GetCurrentThread
WaitForMultipleObjects
ReadFile
GetModuleFileNameA
GetVersion
HeapReAlloc
LCMapStringW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentProcessId
GetFileType
SetHandleCount
DeleteCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetProcAddress
MultiByteToWideChar
FlsAlloc
GetCurrentThreadId
FlsFree
FlsSetValue
lstrcpynW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetStdHandle
ExitProcess
HeapCreate
HeapSetInformation
GetTimeZoneInformation
TerminateProcess
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
DeleteFileA
RaiseException
RtlPcToFileHeader
DecodePointer
EncodePointer
RtlUnwindEx
RtlLookupFunctionEntry
WideCharToMultiByte
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
LoadLibraryA
SetEnvironmentVariableA
GetProcessHeap
SetEndOfFile
GetVersionExW
GetLocalTime
WriteConsoleW
GetModuleFileNameW
MulDiv
CompareStringW
FindResourceW
LoadResource
LockResource
LocalFree
LocalAlloc
DeviceIoControl
FindFirstFileW
GetCurrentProcess
CreateMutexW
WaitForSingleObject
CreateFileMappingW
MapViewOfFile
Sleep
CreateFileW
WriteFile
OpenMutexW
DeleteFileW
GetLastError
ReleaseMutex
CloseHandle
FlsGetValue
GetModuleHandleW
SetEnvironmentVariableW
CreateFileA
HeapSize
user32
DrawTextExW
PostMessageW
GetWindowTextW
GetClassInfoExW
DestroyIcon
GetSystemMetrics
ReleaseDC
FillRect
SystemParametersInfoW
GetWindowThreadProcessId
LoadMenuW
DestroyMenu
GetDialogBaseUnits
SetRectEmpty
MapDialogRect
OffsetRect
CopyRect
GetSysColorBrush
ScreenToClient
CreateDialogParamW
LoadStringW
LoadAcceleratorsW
FindWindowW
IsIconic
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
RegisterClassExW
RegisterWindowMessageW
DefWindowProcW
GetSubMenu
GetCursorPos
TrackPopupMenu
PostQuitMessage
DestroyWindow
DialogBoxParamW
EnableMenuItem
GetMenuState
GetMenu
CheckMenuItem
GetClientRect
SetWindowLongW
SetTimer
KillTimer
GetWindowLongW
AdjustWindowRect
EnumChildWindows
EnableWindow
GetDlgItem
EndDialog
SetWindowTextW
SetWindowLongPtrW
SetWindowPos
CreateWindowExW
SetForegroundWindow
UpdateWindow
GetWindowRect
LoadBitmapW
SendMessageW
InvalidateRect
SendNotifyMessageW
ShowWindow
LoadCursorW
SetCursor
MessageBoxW
GetWindowLongPtrW
GetSysColor
CallWindowProcW
GetDC
ExitWindowsEx
gdi32
CreateBrushIndirect
SetTextAlign
TextOutW
CreateFontW
CreateFontIndirectW
CreateDIBSection
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
DeleteDC
SetTextColor
SetBkColor
GetDeviceCaps
CreateBitmap
comdlg32
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
advapi32
StartServiceW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GetUserNameW
CreateServiceW
OpenSCManagerW
OpenServiceW
ControlService
RegOpenKeyExA
RegQueryValueExA
DeleteService
CloseServiceHandle
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
shell32
SHGetFileInfoW
Shell_NotifyIconW
ShellExecuteW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantClear
Sections
.text Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
License.txt
-
Readme.txt