Overview
overview
7Static
static
370e3f778f5...78.exe
windows7-x64
770e3f778f5...78.exe
windows10-2004-x64
7$COMMONFIL...ip.dll
windows7-x64
3$COMMONFIL...ip.dll
windows10-2004-x64
1$COMMONFIL...e3.exe
windows7-x64
1$COMMONFIL...e3.exe
windows10-2004-x64
1$COMMONFIL...S3.dll
windows7-x64
1$COMMONFIL...S3.dll
windows10-2004-x64
1$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...st.dll
windows7-x64
3$PLUGINSDI...st.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
37ZipDLL.dll
windows7-x64
17ZipDLL.dll
windows10-2004-x64
1CommonLogg...on.dll
windows7-x64
1CommonLogg...on.dll
windows10-2004-x64
1CommonSpecialist.dll
windows7-x64
1CommonSpecialist.dll
windows10-2004-x64
3ExtensionManager.dll
windows7-x64
3ExtensionManager.dll
windows10-2004-x64
3HTML/0_days.htm
windows7-x64
1HTML/0_days.htm
windows10-2004-x64
1HTML/15_days.htm
windows7-x64
1HTML/15_days.htm
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
23-01-2024 23:55
Static task
static1
Behavioral task
behavioral1
Sample
70e3f778f52b04ad8bdb0354532a6a78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70e3f778f52b04ad8bdb0354532a6a78.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$COMMONFILES/ParetoLogic/UUS3/LiteUnzip.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$COMMONFILES/ParetoLogic/UUS3/LiteUnzip.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
$COMMONFILES/ParetoLogic/UUS3/Pareto_Update3.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$COMMONFILES/ParetoLogic/UUS3/Pareto_Update3.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$COMMONFILES/ParetoLogic/UUS3/UUS3.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$COMMONFILES/ParetoLogic/UUS3/UUS3.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/NSIS_HTTPRequest.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/NSIS_HTTPRequest.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
7ZipDLL.dll
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
7ZipDLL.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
CommonLoggingExtension.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
CommonLoggingExtension.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
CommonSpecialist.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
CommonSpecialist.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
ExtensionManager.dll
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
ExtensionManager.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
HTML/0_days.htm
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
HTML/0_days.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
HTML/15_days.htm
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
HTML/15_days.htm
Resource
win10v2004-20231215-en
General
-
Target
$COMMONFILES/ParetoLogic/UUS3/Pareto_Update3.exe
-
Size
1.9MB
-
MD5
6ab06c422009751e04e2c715860dbd63
-
SHA1
78fed4e72a77724abca6194dba84f3eff2ba0e0a
-
SHA256
2c0dd3ca65a6578608563df1753b9ce89388d4907dc9ea95f5f6ca8bf71f46df
-
SHA512
2766c1017911e97ad7d8cf4d8f7bdf3ea6c08ef76e5a74df4ecd376f3a0f53f1f49c7544679ca5c71725d856144d04184871f926112f5cfcfe3e1585458d289f
-
SSDEEP
49152:wYTDBxsF2Lci2he3z3/ucVlbDYXJEH7iHbT5Sc7Fxsdt7+B0XE+ehEcPQD:vz7Lci2hez/LlbMXJEH7iHbTSdIB0XEY
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3976 Pareto_Update3.exe 3976 Pareto_Update3.exe 3976 Pareto_Update3.exe 3976 Pareto_Update3.exe