Overview
overview
7Static
static
3DaddyHax-O...in.zip
windows10-1703-x64
1Discord.Webhooks.dll
windows10-1703-x64
1DiscordRPC.dll
windows10-1703-x64
1Memory.dll
windows10-1703-x64
1Memory.pdb
windows10-1703-x64
3Newtonsoft.Json.dll
windows10-1703-x64
1RandomStri...s.json
windows10-1703-x64
3RandomString.exe
windows10-1703-x64
1RandomString.exe
windows10-1703-x64
7RandomString.pdb
windows10-1703-x64
3RandomStri...g.json
windows10-1703-x64
3System.Management.dll
windows10-1703-x64
1System.Ser...er.dll
windows10-1703-x64
1publish/wi...ry.pdb
windows10-1703-x64
3publish/wi...ng.exe
windows10-1703-x64
7publish/wi...ng.pdb
windows10-1703-x64
3runtimes/w...nt.dll
windows10-1703-x64
1runtimes/w...er.dll
windows10-1703-x64
1win-x64/Di...ks.dll
windows10-1703-x64
1win-x64/Di...PC.dll
windows10-1703-x64
1win-x64/Memory.dll
windows10-1703-x64
1win-x64/Memory.pdb
windows10-1703-x64
3win-x64/Ne...on.dll
windows10-1703-x64
1win-x64/Ra...s.json
windows10-1703-x64
3win-x64/Ra...ng.exe
windows10-1703-x64
1win-x64/Ra...ng.exe
windows10-1703-x64
7win-x64/Ra...ng.pdb
windows10-1703-x64
3win-x64/Ra...g.json
windows10-1703-x64
3win-x64/Sy...nt.dll
windows10-1703-x64
1win-x64/Sy...er.dll
windows10-1703-x64
1Analysis
-
max time kernel
129s -
max time network
146s -
platform
windows10-1703_x64 -
resource
win10-20231220-en -
resource tags
arch:x64arch:x86image:win10-20231220-enlocale:en-usos:windows10-1703-x64system -
submitted
13-02-2024 18:50
Static task
static1
Behavioral task
behavioral1
Sample
DaddyHax-Open-Source-main.zip
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
Discord.Webhooks.dll
Resource
win10-20231215-en
Behavioral task
behavioral3
Sample
DiscordRPC.dll
Resource
win10-20231215-en
Behavioral task
behavioral4
Sample
Memory.dll
Resource
win10-20231215-en
Behavioral task
behavioral5
Sample
Memory.pdb
Resource
win10-20231215-en
Behavioral task
behavioral6
Sample
Newtonsoft.Json.dll
Resource
win10-20231215-en
Behavioral task
behavioral7
Sample
RandomString.deps.json
Resource
win10-20231215-en
Behavioral task
behavioral8
Sample
RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral9
Sample
RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral10
Sample
RandomString.pdb
Resource
win10-20231215-en
Behavioral task
behavioral11
Sample
RandomString.runtimeconfig.json
Resource
win10-20231220-en
Behavioral task
behavioral12
Sample
System.Management.dll
Resource
win10-20231215-en
Behavioral task
behavioral13
Sample
System.ServiceProcess.ServiceController.dll
Resource
win10-20231215-en
Behavioral task
behavioral14
Sample
publish/win-x64/Memory.pdb
Resource
win10-20231215-en
Behavioral task
behavioral15
Sample
publish/win-x64/RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral16
Sample
publish/win-x64/RandomString.pdb
Resource
win10-20231215-en
Behavioral task
behavioral17
Sample
runtimes/win/lib/net7.0/System.Management.dll
Resource
win10-20231215-en
Behavioral task
behavioral18
Sample
runtimes/win/lib/net7.0/System.ServiceProcess.ServiceController.dll
Resource
win10-20231220-en
Behavioral task
behavioral19
Sample
win-x64/Discord.Webhooks.dll
Resource
win10-20231215-en
Behavioral task
behavioral20
Sample
win-x64/DiscordRPC.dll
Resource
win10-20231215-en
Behavioral task
behavioral21
Sample
win-x64/Memory.dll
Resource
win10-20231215-en
Behavioral task
behavioral22
Sample
win-x64/Memory.pdb
Resource
win10-20231220-en
Behavioral task
behavioral23
Sample
win-x64/Newtonsoft.Json.dll
Resource
win10-20231215-en
Behavioral task
behavioral24
Sample
win-x64/RandomString.deps.json
Resource
win10-20231215-en
Behavioral task
behavioral25
Sample
win-x64/RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral26
Sample
win-x64/RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral27
Sample
win-x64/RandomString.pdb
Resource
win10-20231215-en
Behavioral task
behavioral28
Sample
win-x64/RandomString.runtimeconfig.json
Resource
win10-20231215-en
Behavioral task
behavioral29
Sample
win-x64/System.Management.dll
Resource
win10-20231215-en
Behavioral task
behavioral30
Sample
win-x64/System.ServiceProcess.ServiceController.dll
Resource
win10-20231215-en
General
-
Target
RandomString.runtimeconfig.json
-
Size
372B
-
MD5
cc164c1b948924c198019ea9b728e06e
-
SHA1
cc531f61753f5aa889a0d23526de40c9ea6c9717
-
SHA256
0d2a78306989c968cd73f4a6b462eef0371639cbb8790248028e12cba035445a
-
SHA512
402d464ff16a9c7d7d5b85063fce4027b6eab6bae2bff73b8bb35252acefe645c0c05c030cf2d1a6f38e8e1422829734d7985ea3609fe550e95c28285847dc70
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1775739321-368907234-981748298-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1775739321-368907234-981748298-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 3896 OpenWith.exe