Overview
overview
7Static
static
3DaddyHax-O...in.zip
windows10-1703-x64
1Discord.Webhooks.dll
windows10-1703-x64
1DiscordRPC.dll
windows10-1703-x64
1Memory.dll
windows10-1703-x64
1Memory.pdb
windows10-1703-x64
3Newtonsoft.Json.dll
windows10-1703-x64
1RandomStri...s.json
windows10-1703-x64
3RandomString.exe
windows10-1703-x64
1RandomString.exe
windows10-1703-x64
7RandomString.pdb
windows10-1703-x64
3RandomStri...g.json
windows10-1703-x64
3System.Management.dll
windows10-1703-x64
1System.Ser...er.dll
windows10-1703-x64
1publish/wi...ry.pdb
windows10-1703-x64
3publish/wi...ng.exe
windows10-1703-x64
7publish/wi...ng.pdb
windows10-1703-x64
3runtimes/w...nt.dll
windows10-1703-x64
1runtimes/w...er.dll
windows10-1703-x64
1win-x64/Di...ks.dll
windows10-1703-x64
1win-x64/Di...PC.dll
windows10-1703-x64
1win-x64/Memory.dll
windows10-1703-x64
1win-x64/Memory.pdb
windows10-1703-x64
3win-x64/Ne...on.dll
windows10-1703-x64
1win-x64/Ra...s.json
windows10-1703-x64
3win-x64/Ra...ng.exe
windows10-1703-x64
1win-x64/Ra...ng.exe
windows10-1703-x64
7win-x64/Ra...ng.pdb
windows10-1703-x64
3win-x64/Ra...g.json
windows10-1703-x64
3win-x64/Sy...nt.dll
windows10-1703-x64
1win-x64/Sy...er.dll
windows10-1703-x64
1Analysis
-
max time kernel
134s -
max time network
148s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system -
submitted
13-02-2024 18:50
Static task
static1
Behavioral task
behavioral1
Sample
DaddyHax-Open-Source-main.zip
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
Discord.Webhooks.dll
Resource
win10-20231215-en
Behavioral task
behavioral3
Sample
DiscordRPC.dll
Resource
win10-20231215-en
Behavioral task
behavioral4
Sample
Memory.dll
Resource
win10-20231215-en
Behavioral task
behavioral5
Sample
Memory.pdb
Resource
win10-20231215-en
Behavioral task
behavioral6
Sample
Newtonsoft.Json.dll
Resource
win10-20231215-en
Behavioral task
behavioral7
Sample
RandomString.deps.json
Resource
win10-20231215-en
Behavioral task
behavioral8
Sample
RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral9
Sample
RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral10
Sample
RandomString.pdb
Resource
win10-20231215-en
Behavioral task
behavioral11
Sample
RandomString.runtimeconfig.json
Resource
win10-20231220-en
Behavioral task
behavioral12
Sample
System.Management.dll
Resource
win10-20231215-en
Behavioral task
behavioral13
Sample
System.ServiceProcess.ServiceController.dll
Resource
win10-20231215-en
Behavioral task
behavioral14
Sample
publish/win-x64/Memory.pdb
Resource
win10-20231215-en
Behavioral task
behavioral15
Sample
publish/win-x64/RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral16
Sample
publish/win-x64/RandomString.pdb
Resource
win10-20231215-en
Behavioral task
behavioral17
Sample
runtimes/win/lib/net7.0/System.Management.dll
Resource
win10-20231215-en
Behavioral task
behavioral18
Sample
runtimes/win/lib/net7.0/System.ServiceProcess.ServiceController.dll
Resource
win10-20231220-en
Behavioral task
behavioral19
Sample
win-x64/Discord.Webhooks.dll
Resource
win10-20231215-en
Behavioral task
behavioral20
Sample
win-x64/DiscordRPC.dll
Resource
win10-20231215-en
Behavioral task
behavioral21
Sample
win-x64/Memory.dll
Resource
win10-20231215-en
Behavioral task
behavioral22
Sample
win-x64/Memory.pdb
Resource
win10-20231220-en
Behavioral task
behavioral23
Sample
win-x64/Newtonsoft.Json.dll
Resource
win10-20231215-en
Behavioral task
behavioral24
Sample
win-x64/RandomString.deps.json
Resource
win10-20231215-en
Behavioral task
behavioral25
Sample
win-x64/RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral26
Sample
win-x64/RandomString.exe
Resource
win10-20231215-en
Behavioral task
behavioral27
Sample
win-x64/RandomString.pdb
Resource
win10-20231215-en
Behavioral task
behavioral28
Sample
win-x64/RandomString.runtimeconfig.json
Resource
win10-20231215-en
Behavioral task
behavioral29
Sample
win-x64/System.Management.dll
Resource
win10-20231215-en
Behavioral task
behavioral30
Sample
win-x64/System.ServiceProcess.ServiceController.dll
Resource
win10-20231215-en
General
-
Target
publish/win-x64/Memory.pdb
-
Size
37KB
-
MD5
4855bc19f54d680a9067425a12e112e8
-
SHA1
061acc3771500f29d7e04514cb6ee75ec5891313
-
SHA256
711b10a9ebf4d3aebe283104bea3a51191e5c3200329afd13135b3c69d89a7a5
-
SHA512
42a97f568e6088201384b61b02452bd437961f40de29e7dc5aa6c311658c857505144111df5d60a04493e3114344fbadb4de103dc148e35d61d8ad649004b6d3
-
SSDEEP
768:6ZjT+xX7PISzjLj2kqY1nHO97Ppn8l4B4jWk+9KoA:6ZjT+t7gwsYhHO9rpn8DjrSA
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-4068299709-2976237847-2753307267-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-4068299709-2976237847-2753307267-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 1084 OpenWith.exe