Overview
overview
10Static
static
10729a7bf23d...af.exe
windows7-x64
7729a7bf23d...af.exe
windows10-2004-x64
7$PLUGINSDI...lp.dll
windows7-x64
3$PLUGINSDI...lp.dll
windows10-2004-x64
7$PLUGINSDI...SC.dll
windows7-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$TEMP/Conn...wn.exe
windows7-x64
1$TEMP/Conn...wn.exe
windows10-2004-x64
1BuildProps.dll
windows7-x64
1BuildProps.dll
windows10-2004-x64
1ConnUPnP.dll
windows7-x64
1ConnUPnP.dll
windows10-2004-x64
1Connectify.exe
windows7-x64
1Connectify.exe
windows10-2004-x64
6ConnectifyNAT.dll
windows7-x64
1ConnectifyNAT.dll
windows10-2004-x64
1Connectify...es.exe
windows7-x64
1Connectify...es.exe
windows10-2004-x64
1Connectifyd.exe
windows7-x64
1Connectifyd.exe
windows10-2004-x64
1DriverLib.dll
windows7-x64
1DriverLib.dll
windows10-2004-x64
1HardwareHelperLib.dll
windows7-x64
1HardwareHelperLib.dll
windows10-2004-x64
1Analysis
-
max time kernel
136s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
24-01-2024 17:21
Behavioral task
behavioral1
Sample
729a7bf23d64052ca1bde881bc9813af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
729a7bf23d64052ca1bde881bc9813af.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$TEMP/ConnectifyShutdown.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$TEMP/ConnectifyShutdown.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
BuildProps.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
BuildProps.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
ConnUPnP.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
ConnUPnP.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
Connectify.exe
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
Connectify.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
ConnectifyNAT.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
ConnectifyNAT.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
ConnectifyNetServices.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
ConnectifyNetServices.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
Connectifyd.exe
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
Connectifyd.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
DriverLib.dll
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
DriverLib.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
HardwareHelperLib.dll
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
HardwareHelperLib.dll
Resource
win10v2004-20231215-en
General
-
Target
$TEMP/ConnectifyShutdown.exe
-
Size
106KB
-
MD5
6e95adb1c3ac873838673214c2caaa57
-
SHA1
cc6880b9221d452551ddf192445896c210549aa8
-
SHA256
9754e9d8447fb41699f750c6955cacdd3db48539860dd8a8bf1998fefd4cc5bb
-
SHA512
728a0064dbea24880efaee1f50423fa95860f5c128e4bc65a7297e9146212742d54f95e7c54eb74eac244a8d38e904dae787f66b91844243ae238345973c0806
-
SSDEEP
1536:Q1XZVbCBFQkxuuqqqqqqqqqqqqqqo8F7PvL8nxEZXM0MaVPrOi5:Q1XzIQkxlqqqqqqqqqqqqqqKVaVP3
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
Processes:
ConnectifyShutdown.exepid process 3016 ConnectifyShutdown.exe 3016 ConnectifyShutdown.exe 3016 ConnectifyShutdown.exe 3016 ConnectifyShutdown.exe 3016 ConnectifyShutdown.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
ConnectifyShutdown.exedescription pid process Token: SeDebugPrivilege 3016 ConnectifyShutdown.exe