Overview
overview
3Static
static
3943474874/Dbt3.dll
windows7-x64
3943474874/Dbt3.dll
windows10-2004-x64
3943474874/...oj.exe
windows7-x64
1943474874/...oj.exe
windows10-2004-x64
1943474874/...on.chm
windows7-x64
1943474874/...on.chm
windows10-2004-x64
1943474874/...st.exe
windows7-x64
1943474874/...st.exe
windows10-2004-x64
1943474874/...ce.bat
windows7-x64
1943474874/...ce.bat
windows10-2004-x64
1943474874/...n.html
windows7-x64
1943474874/...n.html
windows10-2004-x64
1943474874/...r.html
windows7-x64
1943474874/...r.html
windows10-2004-x64
1943474874/...n.html
windows7-x64
1943474874/...n.html
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
02/01/2024, 15:42
Static task
static1
Behavioral task
behavioral1
Sample
943474874/Dbt3.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
943474874/Dbt3.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
943474874/Dbt3MainProj.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
943474874/Dbt3MainProj.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
943474874/cooltray4.3/CoolTrayIcon.chm
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
943474874/cooltray4.3/CoolTrayIcon.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
943474874/cooltray4.3/CoolTrayTest.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
943474874/cooltray4.3/CoolTrayTest.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
943474874/cooltray4.3/demos/CoolService/CoolTrayService.bat
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
943474874/cooltray4.3/demos/CoolService/CoolTrayService.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
943474874/cooltray4.3/doc/CoolTrayIcon.html
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
943474874/cooltray4.3/doc/CoolTrayIcon.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
943474874/cooltray4.3/doc/SimpleTimer.html
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
943474874/cooltray4.3/doc/SimpleTimer.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
943474874/cooltray4.3/doc/TextTrayIcon.html
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
943474874/cooltray4.3/doc/TextTrayIcon.html
Resource
win10v2004-20231215-en
General
-
Target
943474874/cooltray4.3/CoolTrayTest.exe
-
Size
600KB
-
MD5
9da7b94db0cf89a7c4e73653539ced24
-
SHA1
854ad49f7b9e910ad1789c0bba3e5ca894d40101
-
SHA256
fd0d9ae516853838e8777ec6bffc710c5743da59c9f1e41a6acf6adf7225ba7e
-
SHA512
02d990bc2911b9b3e4da8d78e45cad0b0c994e9489c10f340d5ed1d97aee9d5b0b85b34a5c23aded963c926ef0dc71478b01e78c7ecec224aca9345e7e1bf062
-
SSDEEP
12288:o1izyJ7LOHnO6O9k32GUFHigKHB0ei7MKs:0HJWO6YNdFH6HqJg
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 12 IoCs
pid Process 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe -
Suspicious use of SendNotifyMessage 12 IoCs
pid Process 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe 3020 CoolTrayTest.exe