Overview
overview
10Static
static
10ding.bat
windows7-x64
1ding.bat
windows10-2004-x64
1utils/Gree...or.exe
windows7-x64
utils/Gree...or.exe
windows10-2004-x64
1utils/Gree...86.dll
windows7-x64
1utils/Gree...86.dll
windows10-2004-x64
1utils/Mani...XP.exe
windows7-x64
7utils/Mani...XP.exe
windows10-2004-x64
7utils/Mani...d.xlsx
windows7-x64
1utils/Mani...d.xlsx
windows10-2004-x64
1wuhu.bat
windows7-x64
1wuhu.bat
windows10-2004-x64
1Analysis
-
max time kernel
91s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19/02/2024, 07:33
Behavioral task
behavioral1
Sample
ding.bat
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ding.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
utils/GreenLuma/DLLInjector.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
utils/GreenLuma/DLLInjector.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
utils/GreenLuma/GreenLuma_2023_x86.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
utils/GreenLuma/GreenLuma_2023_x86.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
utils/ManifestAutoUpdate/SteamXP.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
utils/ManifestAutoUpdate/SteamXP.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
utils/ManifestAutoUpdate/id.xlsx
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
utils/ManifestAutoUpdate/id.xlsx
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
wuhu.bat
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
wuhu.bat
Resource
win10v2004-20231215-en
General
-
Target
utils/GreenLuma/DLLInjector.exe
-
Size
131KB
-
MD5
a1a6ab29b22add07f839d05bdb78c6dd
-
SHA1
316ec1098111c016f96fd7fcd0caef7b30221b5c
-
SHA256
6780d82ed61e62a6a6b20c3b7a226529705a31173e9dc7653c3d1f20ab798c7b
-
SHA512
821969f743a1d1da94c814cf17e88e66f770233dfcf6eb4c47df4efc4de00253f73372a657344d6016e7117cc4ddd9489b41bb068b82f9734e18e37792792eec
-
SSDEEP
3072:Yp2eH4hpU9rED3xn9rYkxNCwVZ2+ja73zOvcxw8oXkCdWp:QYhpKriSiNJVZNjaY3op
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1696 DLLInjector.exe 1696 DLLInjector.exe 1696 DLLInjector.exe 1696 DLLInjector.exe 1696 DLLInjector.exe 1696 DLLInjector.exe