Overview
overview
3Static
static
3943474874/Dbt3.dll
windows7-x64
3943474874/Dbt3.dll
windows10-2004-x64
3943474874/...oj.exe
windows7-x64
1943474874/...oj.exe
windows10-2004-x64
1943474874/...on.chm
windows7-x64
1943474874/...on.chm
windows10-2004-x64
1943474874/...st.exe
windows7-x64
1943474874/...st.exe
windows10-2004-x64
1943474874/...ce.bat
windows7-x64
1943474874/...ce.bat
windows10-2004-x64
1943474874/...n.html
windows7-x64
1943474874/...n.html
windows10-2004-x64
1943474874/...r.html
windows7-x64
1943474874/...r.html
windows10-2004-x64
1943474874/...n.html
windows7-x64
1943474874/...n.html
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
02/01/2024, 15:42
Static task
static1
Behavioral task
behavioral1
Sample
943474874/Dbt3.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
943474874/Dbt3.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
943474874/Dbt3MainProj.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
943474874/Dbt3MainProj.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
943474874/cooltray4.3/CoolTrayIcon.chm
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
943474874/cooltray4.3/CoolTrayIcon.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
943474874/cooltray4.3/CoolTrayTest.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
943474874/cooltray4.3/CoolTrayTest.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
943474874/cooltray4.3/demos/CoolService/CoolTrayService.bat
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
943474874/cooltray4.3/demos/CoolService/CoolTrayService.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
943474874/cooltray4.3/doc/CoolTrayIcon.html
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
943474874/cooltray4.3/doc/CoolTrayIcon.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
943474874/cooltray4.3/doc/SimpleTimer.html
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
943474874/cooltray4.3/doc/SimpleTimer.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
943474874/cooltray4.3/doc/TextTrayIcon.html
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
943474874/cooltray4.3/doc/TextTrayIcon.html
Resource
win10v2004-20231215-en
General
-
Target
943474874/Dbt3MainProj.exe
-
Size
458KB
-
MD5
a98c9aa4bf979e745aef8ba1b75acb3d
-
SHA1
ccba5188b84cd1cf7c7a34ccbf46a30764bcfe4c
-
SHA256
bfb5492db0b115c08127e030ea16bebd70d13f00791e6b3c9d7b3e4ce0719691
-
SHA512
449b785273451c62535cd59f9934efd3b1187ee7554b9244cd53e0f3a723ffd889c7807d71a76b397d71ace2f5c9dde522f63f3b5230ef1377b73f2c8e58e77f
-
SSDEEP
6144:N0xdD/jRowQi43iV3tc4vmWmXFhO5fypr/KP1BGyfmuzuGeT6inyc9lK:cdDrRowQ7BXTsypzy5zu5TpL
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 10 IoCs
pid Process 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe -
Suspicious use of SendNotifyMessage 10 IoCs
pid Process 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe 4840 Dbt3MainProj.exe