Analysis
-
max time kernel
131s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
18/01/2024, 00:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe
Resource
win7-20231215-en
windows7-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe
-
Size
1.8MB
-
MD5
f6b3054e044291fc8cc8313bf66b80a9
-
SHA1
674f2e005036a3cd376ce0a0cdcb2d77c82c0a49
-
SHA256
cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040
-
SHA512
0315df0121384ef5823d181f597919aee74bc27fac490f94cea9d7743bd97720aa02062f982217f6d28acdd46f348de502b51b8125545850f499e1fe0845b47b
-
SSDEEP
49152:HKJ0WR7AFPyyiSruXKpk3WFDL9zxnSKCks7R9L58UqFJjskU:HKlBAFPydSS6W6X9lnNC17DVqFJU
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleCrashHandler64.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_am.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ta.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ja.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdate.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\psmachine_64.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ca.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_fa.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_id.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleUpdate.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_en-GB.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\psmachine.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_is.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ko.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\psuser.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ml.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_sw.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File opened for modification C:\Program Files (x86)\Google\Temp\GUT70DB.tmp cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleUpdateBroker.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleUpdateOnDemand.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ar.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_da.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\psuser_64.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_cs.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_de.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_nl.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_es-419.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_kn.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_sl.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File opened for modification C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleUpdateSetup.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_tr.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleUpdateCore.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_et.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_gu.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_sk.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_th.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_zh-CN.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleUpdateSetup.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_bn.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_es.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_hu.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_pt-BR.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ru.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_uk.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_fr.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_lv.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_no.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_pl.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_te.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ur.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_fi.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_it.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_mr.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ms.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_sv.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleUpdateComRegisterShell64.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_en.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_fil.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_sr.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\GoogleCrashHandler.exe cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_bg.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_ro.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_vi.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe File created C:\Program Files (x86)\Google\Temp\GUM70DA.tmp\goopdateres_zh-TW.dll cf9567afc76465423e48ced3349344c7b8de266b35d88d17f5d27fe542881040.exe