Overview
overview
7Static
static
78fc562f8ef...64.exe
windows7-x64
78fc562f8ef...64.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...le.exe
windows7-x64
3$PLUGINSDI...le.exe
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3yourface.exe
windows7-x64
7yourface.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3MainInstaller.exe
windows7-x64
7MainInstaller.exe
windows10-2004-x64
7PingMe.exe
windows7-x64
1PingMe.exe
windows10-2004-x64
1Setup.exe
windows7-x64
7Setup.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...oc.dll
windows7-x64
1$PLUGINSDI...oc.dll
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
32YourFace_Util.dll
windows7-x64
32YourFace_Util.dll
windows10-2004-x64
3Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04/02/2024, 17:47
Behavioral task
behavioral1
Sample
8fc562f8ef3b09ecd7bc9e710e809564.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fc562f8ef3b09ecd7bc9e710e809564.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/bundle.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/bundle.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
yourface.exe
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
yourface.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
MainInstaller.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
MainInstaller.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
PingMe.exe
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
PingMe.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
Setup.exe
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
Setup.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/KillProc.dll
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/KillProc.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
2YourFace_Util.dll
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
2YourFace_Util.dll
Resource
win10v2004-20231215-en
General
-
Target
$PLUGINSDIR/Banner.dll
-
Size
481KB
-
MD5
a12e31793e1dffd9fba527c30c275c74
-
SHA1
07b0d01734bd782a59796185ed6f9f1bc2c40e5b
-
SHA256
f83eaa95ef4be864b9f425d3c07b450741793d92cdd73b891410dbc5e250d0fb
-
SHA512
9e929a6a4a62b222ca38b4ad3ea808391ffa8baa15d325f2771cfad2a46b3125ee955083b206be8fca44570127ed304205efa59ac3db7b2e18f97c10a24e42e2
-
SSDEEP
3072:fWeEeexeeheeZeeWee/ee3eeHeeFeeKee5eeleeBeezeeKeeeKeeFeeQeeEeezev:sDTbePn5ojie4suBYLzA8zjZGe6
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3512 wrote to memory of 1748 3512 rundll32.exe 33 PID 3512 wrote to memory of 1748 3512 rundll32.exe 33 PID 3512 wrote to memory of 1748 3512 rundll32.exe 33