Overview
overview
7Static
static
3Disk1/ISSetup.dll
windows7-x64
1Disk1/ISSetup.dll
windows10-2004-x64
1DotNetInstaller.exe
windows7-x64
1DotNetInstaller.exe
windows10-2004-x64
1IScript.dll
windows7-x64
1IScript.dll
windows10-2004-x64
1IUser.dll
windows7-x64
1IUser.dll
windows10-2004-x64
1ctor.dll
windows7-x64
1ctor.dll
windows10-2004-x64
1ikernel.dll
windows7-x64
1ikernel.dll
windows10-2004-x64
1objectps.dll
windows7-x64
1objectps.dll
windows10-2004-x64
1Disk1/setup.exe
windows7-x64
4Disk1/setup.exe
windows10-2004-x64
4Manuals/OR...es.pdf
windows7-x64
1Manuals/OR...es.pdf
windows10-2004-x64
1Manuals/V9...al.pdf
windows7-x64
1Manuals/V9...al.pdf
windows10-2004-x64
1Support/vc...86.exe
windows7-x64
7Support/vc...86.exe
windows10-2004-x64
7Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
02-02-2024 15:11
Static task
static1
Behavioral task
behavioral1
Sample
Disk1/ISSetup.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Disk1/ISSetup.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
DotNetInstaller.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
DotNetInstaller.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
IScript.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
IScript.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
IUser.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
IUser.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
ctor.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
ctor.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
ikernel.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
ikernel.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
objectps.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
objectps.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
Disk1/setup.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
Disk1/setup.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
Manuals/ORTEC File Structures.pdf
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
Manuals/ORTEC File Structures.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
Manuals/V9 Users Manual.pdf
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
Manuals/V9 Users Manual.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
Support/vc_redist.x86.exe
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
Support/vc_redist.x86.exe
Resource
win10v2004-20231215-en
General
-
Target
ikernel.dll
-
Size
676KB
-
MD5
f7217ffc0aac4e60dc9f1c0d687c20b3
-
SHA1
c04fa2ab93aaf44a824364cfd4b2c03a9bdb1f38
-
SHA256
8b44a220ec6760a728d2fc7c1a31c39550c5c991d8decd1cd56e7d9c18f12135
-
SHA512
ab954477f04319b5c14a5d4dd09f964dc2dddf1dcf1222fd7e32b39d02f40004f53296ef05484b1bce995035f4626acdcb8632eebed40b11c2b5e679e21842d1
-
SSDEEP
12288:nObIUZvGz/DrG2wfIyorSWhUDgxhswHABw/C/GO/5e02sUh9hAtEd7C91Lmiy:nOcw6/+Porvh/hswHcw/C/thpNUNAtO1
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
regsvr32.exedescription pid process target process PID 3444 wrote to memory of 1984 3444 regsvr32.exe regsvr32.exe PID 3444 wrote to memory of 1984 3444 regsvr32.exe regsvr32.exe PID 3444 wrote to memory of 1984 3444 regsvr32.exe regsvr32.exe