Overview
overview
7Static
static
7foredu.com...er.exe
windows7-x64
7foredu.com...er.exe
windows10-2004-x64
7foredu.com...sp.dll
windows7-x64
7foredu.com...sp.dll
windows10-2004-x64
7foredu.com...sp.dll
windows7-x64
1foredu.com...sp.dll
windows10-2004-x64
1foredu.com...mo.exe
windows7-x64
7foredu.com...mo.exe
windows10-2004-x64
7foredu.com...ok.dll
windows7-x64
1foredu.com...ok.dll
windows10-2004-x64
1foredu.com...mo.exe
windows7-x64
7foredu.com...mo.exe
windows10-2004-x64
7Analysis
-
max time kernel
143s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
09/01/2024, 03:06
Behavioral task
behavioral1
Sample
foredu.com demo software/e-Pointer.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
foredu.com demo software/e-Pointer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
foredu.com demo software/xSpeed.net/hardsp.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
foredu.com demo software/xSpeed.net/hardsp.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
foredu.com demo software/xSpeed.net/softsp.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
foredu.com demo software/xSpeed.net/softsp.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
foredu.com demo software/xSpeed.net/xSpeed.net_demo.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
foredu.com demo software/xSpeed.net/xSpeed.net_demo.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
foredu.com demo software/xSpeed/hook.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
foredu.com demo software/xSpeed/hook.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
foredu.com demo software/xSpeed/xSpeed_demo.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
foredu.com demo software/xSpeed/xSpeed_demo.exe
Resource
win10v2004-20231215-en
General
-
Target
foredu.com demo software/e-Pointer.exe
-
Size
40KB
-
MD5
dd438b9f3829a1078fa57e48147936c5
-
SHA1
22e8e6ac1d522029c09ac167415711a1e1ce8bed
-
SHA256
d2f43ff1d9a1bc61c7a075d49155a061e6fe0393360ff29c25405278204d7ad4
-
SHA512
9917d060c34b99a85cfe200fb1c5ad0fc13324c290744106c112a2bf56d5edf64c5270161c1bc941ba4fa0fc4b0f196255e5be4d420bd97c0739932c4a82b9b5
-
SSDEEP
768:mEUcHLJlnDYGtf6xsRM30x7tgtkGoO2w6l7TFHY3tk872MIt1eqJSw+zXs:mKbc2jqubGkhTNY9kME1eqUw+bs
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4776-0-0x0000000000400000-0x000000000041B000-memory.dmp upx behavioral2/memory/4776-1-0x0000000000400000-0x000000000041B000-memory.dmp upx