Overview
overview
4Static
static
374825e924d...7b.exe
windows7-x64
174825e924d...7b.exe
windows10-2004-x64
1$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Plugins/ge...ys.dll
windows7-x64
1Plugins/ge...ys.dll
windows10-2004-x64
1Plugins/ge...ex.dll
windows7-x64
1Plugins/ge...ex.dll
windows10-2004-x64
3Plugins/gen_tray.dll
windows7-x64
1Plugins/gen_tray.dll
windows10-2004-x64
1Plugins/in_cdda.dll
windows7-x64
3Plugins/in_cdda.dll
windows10-2004-x64
3Plugins/in_mp3.dll
windows7-x64
1Plugins/in_mp3.dll
windows10-2004-x64
1Plugins/in_wave.dll
windows7-x64
1Plugins/in_wave.dll
windows10-2004-x64
1Plugins/out_ds.dll
windows7-x64
1Plugins/out_ds.dll
windows10-2004-x64
1Plugins/out_wave.dll
windows7-x64
1Plugins/out_wave.dll
windows10-2004-x64
1Plugins/vis_nsfs.dll
windows7-x64
1Plugins/vis_nsfs.dll
windows10-2004-x64
1winamp.exe
windows7-x64
4winamp.exe
windows10-2004-x64
4winampa.exe
windows7-x64
1winampa.exe
windows10-2004-x64
1winampmb.htm
windows7-x64
1winampmb.htm
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-01-2024 10:54
Static task
static1
Behavioral task
behavioral1
Sample
74825e924d93d01563c99f947aa5687b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74825e924d93d01563c99f947aa5687b.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
Plugins/gen_hotkeys.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Plugins/gen_hotkeys.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
Plugins/gen_jumpex.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
Plugins/gen_jumpex.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
Plugins/gen_tray.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
Plugins/gen_tray.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
Plugins/in_cdda.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
Plugins/in_cdda.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
Plugins/in_mp3.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
Plugins/in_mp3.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
Plugins/in_wave.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
Plugins/in_wave.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
Plugins/out_ds.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
Plugins/out_ds.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
Plugins/out_wave.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
Plugins/out_wave.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
Plugins/vis_nsfs.dll
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
Plugins/vis_nsfs.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
winamp.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
winamp.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
winampa.exe
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
winampa.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
winampmb.htm
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
winampmb.htm
Resource
win10v2004-20231215-en
General
-
Target
winamp.exe
-
Size
958KB
-
MD5
1fdf5992e8c749687c45d701e4ab9f5d
-
SHA1
d6fd73aadde72f6ff9bf95dc35a2de936895ce1e
-
SHA256
6d7e88d172895b1d1010e6803b4bbe58735b41da7a6f134f76f617a61865497a
-
SHA512
64afd26cae362f105ab5d7badef3d74080e86db152fe5878a4dd8ddd9d837a9ca601695e1c0309e165ed305b39cb156cb79d8ff4485422c5645d5e997e16c45b
-
SSDEEP
12288:HJGdabPu6vw3hDIUlI3/brDpYfZcNkiU1EJLCQrnoGy/naqaXW/z:HoF1I13/b/pYfZcNki1LCQzoBv/z
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\winamp.ini winamp.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1648 winamp.exe