Overview
overview
7Static
static
37b857c19b6...2d.exe
windows7-x64
37b857c19b6...2d.exe
windows10-2004-x64
3$SYSDIR/Na...er.scr
windows7-x64
1$SYSDIR/Na...er.scr
windows10-2004-x64
1$TEMP/dospop.exe
windows7-x64
7$TEMP/dospop.exe
windows10-2004-x64
7tbu03852/dospop.dll
windows7-x64
6tbu03852/dospop.dll
windows10-2004-x64
6tbu03852/options.html
windows7-x64
1tbu03852/options.html
windows10-2004-x64
1tbu03852/s...g.html
windows7-x64
1tbu03852/s...g.html
windows10-2004-x64
1tbu03852/s...b.html
windows7-x64
1tbu03852/s...b.html
windows10-2004-x64
1tbu03852/tbhelper.dll
windows7-x64
1tbu03852/tbhelper.dll
windows10-2004-x64
1tbu03852/t...091.js
windows7-x64
1tbu03852/t...091.js
windows10-2004-x64
1tbu03852/u...ll.exe
windows7-x64
1tbu03852/u...ll.exe
windows10-2004-x64
1tbu03852/update.exe
windows7-x64
1tbu03852/update.exe
windows10-2004-x64
1Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
27-01-2024 23:04
Static task
static1
Behavioral task
behavioral1
Sample
7b857c19b65383476a2450b99f6d6e2d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7b857c19b65383476a2450b99f6d6e2d.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
$SYSDIR/Natasha_bedingfield_Screensaver.scr
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$SYSDIR/Natasha_bedingfield_Screensaver.scr
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$TEMP/dospop.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$TEMP/dospop.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
tbu03852/dospop.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
tbu03852/dospop.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
tbu03852/options.html
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
tbu03852/options.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
tbu03852/static_img.html
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
tbu03852/static_img.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
tbu03852/static_pub.html
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
tbu03852/static_pub.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
tbu03852/tbhelper.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
tbu03852/tbhelper.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
tbu03852/tbs_include_script_008091.js
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
tbu03852/tbs_include_script_008091.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
tbu03852/uninstall.exe
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
tbu03852/uninstall.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
tbu03852/update.exe
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
tbu03852/update.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
Uninstall.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
Uninstall.exe
Resource
win10v2004-20231215-en
General
-
Target
$SYSDIR/Natasha_bedingfield_Screensaver.scr
-
Size
2.8MB
-
MD5
e8158d2a862de257c8d8e317d9048eb2
-
SHA1
d7afb69e8804dbb12599d51cdc6758eb85f4e339
-
SHA256
62c1b3383f632c2e78c425fb65282bbd7934f3566855832f93054d44c07f770d
-
SHA512
1df6490a0193f228980df6870131fab984b407bd94ed009ce04f52634f5c435f524653e19d98f0a4448231d12a3960783950e45d18281950a18ce1b1480bf5fd
-
SSDEEP
49152:aWHAU2jV3KQDRcm1MgYB60VSfulYF1xckJK3RoSJYx0cJwPeN2Vvuh:VAU2j1ymwS2lYLxBgPEJwNJm
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2204 Natasha_bedingfield_Screensaver.scr 2204 Natasha_bedingfield_Screensaver.scr 2204 Natasha_bedingfield_Screensaver.scr