Overview
overview
3Static
static
37595709559...e4.exe
windows7-x64
37595709559...e4.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...n.html
windows7-x64
1$PLUGINSDI...n.html
windows10-2004-x64
1$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PROGRAMFI...gs.exe
windows7-x64
1$PROGRAMFI...gs.exe
windows10-2004-x64
1$PROGRAMFI...ar.dll
windows7-x64
1$PROGRAMFI...ar.dll
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/01/2024, 21:40
Static task
static1
Behavioral task
behavioral1
Sample
75957095590e45d728c5aa81420c47e4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75957095590e45d728c5aa81420c47e4.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/eula_en.html
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/eula_en.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/installhelper.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/installhelper.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PROGRAMFILES/alotappbar/bin/ALOTSettings.exe
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
$PROGRAMFILES/alotappbar/bin/ALOTSettings.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$PROGRAMFILES/alotappbar/bin/alotappbar.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
$PROGRAMFILES/alotappbar/bin/alotappbar.dll
Resource
win10v2004-20231215-en
General
-
Target
$PLUGINSDIR/installhelper.dll
-
Size
127KB
-
MD5
f8463172ea34e0170f31b5813ec49b4c
-
SHA1
62675090d4fc5b137c8d173b9c71541f0aa906e0
-
SHA256
65cbfe1fcd6fb0e140dd0e46e1f9a55b789d5ae5a11a14702bfbfc9bc79ea074
-
SHA512
ae9a7492dfdcae76c6d0ea3bdf08f4868537e118c1c9b0f3715219866bbcb4d85e61bc31440278c954083cf529b8a1bcf4f8ec821f52ec388ebe28749cf62f4e
-
SSDEEP
3072:UENqXRtTAI52+0RDYxgw6qoDh/V75vm6TCM:loIIM+0ogw65FVxVCM
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1172 rundll32.exe 1172 rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4752 wrote to memory of 1172 4752 rundll32.exe 84 PID 4752 wrote to memory of 1172 4752 rundll32.exe 84 PID 4752 wrote to memory of 1172 4752 rundll32.exe 84
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\installhelper.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4752 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\installhelper.dll,#12⤵
- Suspicious use of SetWindowsHookEx
PID:1172
-