Overview
overview
7Static
static
3ausweichspiel.exe
windows7-x64
7ausweichspiel.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMP/vcre...15.exe
windows7-x64
7$TEMP/vcre...15.exe
windows10-2004-x64
7${ausweichspiel}.exe
windows7-x64
1${ausweichspiel}.exe
windows10-2004-x64
1Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Analysis
- max time kernel
121s - max time network
136s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
22/02/2024, 22:23
Static task
static1
Behavioral task
behavioral1
Sample
ausweichspiel.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ausweichspiel.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
$TEMP/vcredist_x86_2015.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$TEMP/vcredist_x86_2015.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
${ausweichspiel}.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
${ausweichspiel}.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
Uninstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Uninstall.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240221-en
General
- Target ${ausweichspiel}.exe
- Size 8.2MB
- Sample240222-2avprsgc46
- SHA256 92323b50c923433f4167a906dcfb6750a5e0b4250577423050473ed2b7752e37
- MD5 26ce28eb1383c656431e95533d5f7b5d
- SHA1 2154cf2db3833dfcdbb083d18b865caafc05b2b4
- SHA512 de6319a0cc1a7604da0e39c9a5c0cdf1201777d8b9c1ae34263259b4b0744bf484e06f66e0411b78452cb9ed8050ff4854c26f5824fa8ab3be549720d7f8661c
- SSDEEP 98304:JyDn63AaZq6QmZAuFNtcsIrcAdrVjDdwzP:JA6waHQQAQDcPQAdZSzP
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2748 ${ausweichspiel}.exe 2748 ${ausweichspiel}.exe