Overview
overview
10Static
static
3ForceCPU.exe
windows7-x64
1ForceCPU.exe
windows10-2004-x64
9HTCTL32.dll
windows7-x64
1HTCTL32.dll
windows10-2004-x64
3PCICHEK.dll
windows7-x64
1PCICHEK.dll
windows10-2004-x64
1PCICL32.dll
windows7-x64
1PCICL32.dll
windows10-2004-x64
1QWhale.Common.dll
windows7-x64
1QWhale.Common.dll
windows10-2004-x64
1QWhale.Editor.dll
windows7-x64
1QWhale.Editor.dll
windows10-2004-x64
1QWhale.Syntax.dll
windows7-x64
1QWhale.Syntax.dll
windows10-2004-x64
1SampleRules.js
windows7-x64
1SampleRules.js
windows10-2004-x64
1SimpleFilter.dll
windows7-x64
1SimpleFilter.dll
windows10-2004-x64
1TCCTL32.dll
windows7-x64
1TCCTL32.dll
windows10-2004-x64
1Timeline.dll
windows7-x64
1Timeline.dll
windows10-2004-x64
1client32.exe
windows7-x64
10client32.exe
windows10-2004-x64
10libssl-3-x64.dll
windows7-x64
1libssl-3-x64.dll
windows10-2004-x64
1msvcr100.dll
windows7-x64
3msvcr100.dll
windows10-2004-x64
3pcicapi.dll
windows7-x64
1pcicapi.dll
windows10-2004-x64
1remcmdstub.exe
windows7-x64
1remcmdstub.exe
windows10-2004-x64
1Analysis
- max time kernel
90s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
20/02/2024, 05:58
Static task
static1
Behavioral task
behavioral1
Sample
ForceCPU.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral2
Sample
ForceCPU.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
HTCTL32.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral4
Sample
HTCTL32.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
PCICHEK.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral6
Sample
PCICHEK.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
PCICL32.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral8
Sample
PCICL32.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
QWhale.Common.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral10
Sample
QWhale.Common.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
QWhale.Editor.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral12
Sample
QWhale.Editor.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
QWhale.Syntax.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral14
Sample
QWhale.Syntax.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
SampleRules.js
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral16
Sample
SampleRules.js
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
SimpleFilter.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral18
Sample
SimpleFilter.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
TCCTL32.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral20
Sample
TCCTL32.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Timeline.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral22
Sample
Timeline.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
client32.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral24
Sample
client32.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
libssl-3-x64.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral26
Sample
libssl-3-x64.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
msvcr100.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral28
Sample
msvcr100.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
pcicapi.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral30
Sample
pcicapi.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
remcmdstub.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral32
Sample
remcmdstub.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
General
- Target ForceCPU.exe
- Size 19KB
- Sample240220-gn5fxada42
- SHA256 2d209c2b823e350c1f1661f87a3a013804302477afe56877f94adbafe7a2e06d
- MD5 b982a103b0d4e0db856026a163124bf3
- SHA1 40772be00068bbd394ff0fccd551151a822f3e70
- SHA512 214ecdf348e2093e91a489c0541f05eb3356e2531c1840a99d9f727caf1130f5041ccbc6356a7bc31fb4dece927d3fee2fa9e4689d2badbe680fd40104a9d327
- SSDEEP 192:fHtIemmfltxD5WLtWwiyT5hNGnYe+PjPxucwwyibSucwwQJk35H0JOqxEV1a//bG:xD5WLZ5qnYPLxoDfoDg+JNY1cAhhv
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detects Windows executables referencing non-Windows User-Agents 1 IoCs
resource yara_rule behavioral2/memory/2336-2-0x00007FF86C3B0000-0x00007FF86CE71000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA