Overview
overview
7Static
static
3bandicam-1-6-en.exe
windows7-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$TEMP/BDMP...UP.exe
windows7-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$SYSDIR/bdmjpeg.dll
windows7-x64
1$SYSDIR/bdmjpeg64.dll
windows7-x64
1$SYSDIR/bdmpega.dll
windows7-x64
1$SYSDIR/bdmpega64.dll
windows7-x64
1$SYSDIR/bdmpegv.dll
windows7-x64
1$SYSDIR/bdmpegv64.dll
windows7-x64
1$TEMP/bdfilters.dll
windows7-x64
1bdfilters.dll
windows7-x64
1bdfilters64.dll
windows7-x64
7bdcam.dll
windows7-x64
1bdcam.exe
windows7-x64
1bdcam64.exe
windows7-x64
1bdcam64.dll
windows7-x64
1bdcamih.dll
windows7-x64
1bdcap32.dll
windows7-x64
1bdcap64.dll
windows7-x64
1bdfix.exe
windows7-x64
1Analysis
-
max time kernel
121s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240221-es -
resource tags
arch:x64arch:x86image:win7-20240221-eslocale:es-esos:windows7-x64systemwindows -
submitted
22/02/2024, 20:50
Static task
static1
Behavioral task
behavioral1
Sample
bandicam-1-6-en.exe
Resource
win7-20240220-es
Behavioral task
behavioral2
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-es
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-es
Behavioral task
behavioral4
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240215-es
Behavioral task
behavioral5
Sample
$TEMP/BDMPEG1SETUP.exe
Resource
win7-20240221-es
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-es
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-es
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240220-es
Behavioral task
behavioral9
Sample
$SYSDIR/bdmjpeg.dll
Resource
win7-20240221-es
Behavioral task
behavioral10
Sample
$SYSDIR/bdmjpeg64.dll
Resource
win7-20240221-es
Behavioral task
behavioral11
Sample
$SYSDIR/bdmpega.dll
Resource
win7-20240221-es
Behavioral task
behavioral12
Sample
$SYSDIR/bdmpega64.dll
Resource
win7-20240221-es
Behavioral task
behavioral13
Sample
$SYSDIR/bdmpegv.dll
Resource
win7-20240221-es
Behavioral task
behavioral14
Sample
$SYSDIR/bdmpegv64.dll
Resource
win7-20240220-es
Behavioral task
behavioral15
Sample
$TEMP/bdfilters.dll
Resource
win7-20240221-es
Behavioral task
behavioral16
Sample
bdfilters.dll
Resource
win7-20240221-es
Behavioral task
behavioral17
Sample
bdfilters64.dll
Resource
win7-20240215-es
Behavioral task
behavioral18
Sample
bdcam.dll
Resource
win7-20240221-es
Behavioral task
behavioral19
Sample
bdcam.exe
Resource
win7-20240221-es
Behavioral task
behavioral20
Sample
bdcam64.exe
Resource
win7-20240221-es
Behavioral task
behavioral21
Sample
bdcam64.dll
Resource
win7-20240221-es
Behavioral task
behavioral22
Sample
bdcamih.dll
Resource
win7-20240221-es
Behavioral task
behavioral23
Sample
bdcap32.dll
Resource
win7-20240221-es
Behavioral task
behavioral24
Sample
bdcap64.dll
Resource
win7-20240221-es
Behavioral task
behavioral25
Sample
bdfix.exe
Resource
win7-20240221-es
General
-
Target
$SYSDIR/bdmjpeg.dll
-
Size
15KB
-
MD5
2ac3988bbee9584c57efcff61616e105
-
SHA1
cd92b3c225b497962cb90b1f5a68b5da42cb6ee3
-
SHA256
9c260db97b168d699148dc58d9b013834052e610fbcc78da1c4d7cc2d33a0ce2
-
SHA512
53eeca7a1c983bee04f6f923ffd14d4a44b13be407c10bbf854d06da1d397e36d19a0d99f0f1a8a66304e38f90f07fc2c395b37e4a8893bfb5a017cf4b3c916e
-
SSDEEP
192:Jc7HKZhkNpB6zEjPAS/Qjbf32oXX3WLjSHB772HXrOR3Xp9EqQSp1Bz3F:Jc7FKQ6moXX3WaHt2HbOtj1Rz
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2268 wrote to memory of 2080 2268 rundll32.exe 1 PID 2268 wrote to memory of 2080 2268 rundll32.exe 1 PID 2268 wrote to memory of 2080 2268 rundll32.exe 1 PID 2268 wrote to memory of 2080 2268 rundll32.exe 1 PID 2268 wrote to memory of 2080 2268 rundll32.exe 1 PID 2268 wrote to memory of 2080 2268 rundll32.exe 1 PID 2268 wrote to memory of 2080 2268 rundll32.exe 1