Overview
overview
10Static
static
10729a7bf23d...af.exe
windows7-x64
7729a7bf23d...af.exe
windows10-2004-x64
7$PLUGINSDI...lp.dll
windows7-x64
3$PLUGINSDI...lp.dll
windows10-2004-x64
7$PLUGINSDI...SC.dll
windows7-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$TEMP/Conn...wn.exe
windows7-x64
1$TEMP/Conn...wn.exe
windows10-2004-x64
1BuildProps.dll
windows7-x64
1BuildProps.dll
windows10-2004-x64
1ConnUPnP.dll
windows7-x64
1ConnUPnP.dll
windows10-2004-x64
1Connectify.exe
windows7-x64
1Connectify.exe
windows10-2004-x64
6ConnectifyNAT.dll
windows7-x64
1ConnectifyNAT.dll
windows10-2004-x64
1Connectify...es.exe
windows7-x64
1Connectify...es.exe
windows10-2004-x64
1Connectifyd.exe
windows7-x64
1Connectifyd.exe
windows10-2004-x64
1DriverLib.dll
windows7-x64
1DriverLib.dll
windows10-2004-x64
1HardwareHelperLib.dll
windows7-x64
1HardwareHelperLib.dll
windows10-2004-x64
1Analysis
- max time kernel
136s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
24/01/2024, 17:21
Behavioral task
behavioral1
Sample
729a7bf23d64052ca1bde881bc9813af.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral2
Sample
729a7bf23d64052ca1bde881bc9813af.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$TEMP/ConnectifyShutdown.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral16
Sample
$TEMP/ConnectifyShutdown.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
BuildProps.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral18
Sample
BuildProps.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
ConnUPnP.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral20
Sample
ConnUPnP.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Connectify.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral22
Sample
Connectify.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
ConnectifyNAT.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral24
Sample
ConnectifyNAT.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
ConnectifyNetServices.exe
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral26
Sample
ConnectifyNetServices.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Connectifyd.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral28
Sample
Connectifyd.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
DriverLib.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral30
Sample
DriverLib.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
HardwareHelperLib.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral32
Sample
HardwareHelperLib.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
General
- Target $TEMP/ConnectifyShutdown.exe
- Size 106KB
- Sample240124-vxb3lsecfl
- SHA256 9754e9d8447fb41699f750c6955cacdd3db48539860dd8a8bf1998fefd4cc5bb
- MD5 6e95adb1c3ac873838673214c2caaa57
- SHA1 cc6880b9221d452551ddf192445896c210549aa8
- SHA512 728a0064dbea24880efaee1f50423fa95860f5c128e4bc65a7297e9146212742d54f95e7c54eb74eac244a8d38e904dae787f66b91844243ae238345973c0806
- SSDEEP 1536:Q1XZVbCBFQkxuuqqqqqqqqqqqqqqo8F7PvL8nxEZXM0MaVPrOi5:Q1XzIQkxlqqqqqqqqqqqqqqKVaVP3
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 5 IoCs
pid Process 3016 ConnectifyShutdown.exe 3016 ConnectifyShutdown.exe 3016 ConnectifyShutdown.exe 3016 ConnectifyShutdown.exe 3016 ConnectifyShutdown.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3016 ConnectifyShutdown.exe