Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 11:10
Behavioral task
behavioral1
Sample
Terminator.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Terminator.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
.chm
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
սV1.0ڴע.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
սV1.0ڴע.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
˵.html
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
˵.html
Resource
win10v2004-20231215-en
General
-
Target
Terminator.exe
-
Size
353KB
-
MD5
c3fac0de383c0ea025d489a85c816bb4
-
SHA1
6e60d1e40a32860d64432088fe6913bb431877a8
-
SHA256
70f7cdce15333c25fcf80285f63e31105097ecd056965b760502e9811ecbd437
-
SHA512
f1c822227d8a0a9f5fde765fe8ee3a602fde4554ef339d9ae3138d7a462b51d6465e0f4706c2727c656f9a93d06e57d8e16b3c5817ec6d4e873f64044e3bef1f
-
SSDEEP
6144:XIBbY48suS3beeQdXgPdiPrsjsEH6R6830h57Q2DPlBi4/xI0yCN:XIBUPmbeeGmygAEo10pD+4ZRz
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1684-0-0x0000000000400000-0x00000000004CC000-memory.dmp upx behavioral1/memory/1684-1-0x0000000000400000-0x00000000004CC000-memory.dmp upx behavioral1/memory/1684-2-0x0000000000400000-0x00000000004CC000-memory.dmp upx -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1684 Terminator.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1684 Terminator.exe 1684 Terminator.exe