Analysis
- max time kernel
146s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
25/01/2024, 15:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe
Resource
win7-20231215-en
windows7-x64
15 signatures
150 seconds
General
- Target 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe
- Size 2.3MB
- Sample240125-s3j93aaggk
- SHA256 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65
- MD5 d8be08fab4e4ccff198edbf22d5c1c49
- SHA1 d7459b0dddac7966f33442ff89ec68d98f3c119d
- SHA512 ed6a0e3ae4c3eb7889313f015ab07c11308c6e4f39dd5ce9f3d0e03119f8462fc3872b1294d55074219c28e5008491397fd65325a74832ab6997e566b4687af6
- SSDEEP 49152:PHC+Rd3a1USycU+C52rwy3mCTbjjNvo8EmbP735YVYN3XmF+bmgb1+cxC:vCW1a10cU+C5OX3mEjjNvo8EmjOYNI+U
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusUpdater.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_cs.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_de.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_el.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_mr.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusUpdateBroker.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_fa.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_uk.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_vi.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\psuser.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_id.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ur.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdate.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_am.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_iw.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_no.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ro.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_sw.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_bn.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_en-GB.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_kn.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ms.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ta.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_tr.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_it.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_fil.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_fr.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_hi.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_pt-BR.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_zh-CN.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File opened for modification C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusUpdateSetup.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusUpdateOnDemand.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusUpdateComRegisterShell64.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\psmachine.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ko.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ru.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_te.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_sl.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_sr.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusUpdate.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ar.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_es.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_fi.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ml.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_sk.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_th.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_zh-TW.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\psmachine_64.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusCrashHandler64.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_bg.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_hu.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_lt.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_sv.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusCrashHandler.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_et.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_hr.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_is.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_ja.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_pt-PT.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\Get-AppxVersion.exe 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_en.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_es-419.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\asupdateres_lv.dll 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe File created C:\Program Files (x86)\ASUS\Temp\GUM4D35.tmp\AsusUpdateHelper.msi 861f1df97ed551f081dff1aefb072107b263fc9263c4a08a25ca3dffbe35af65.exe