Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
23/02/2024, 11:14
Static task
static1
Behavioral task
behavioral1
Sample
GDMO.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GDMO.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
minhook.x32.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
minhook.x32.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
xinput9_1_0.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
xinput9_1_0.dll
Resource
win10v2004-20240221-en
General
-
Target
xinput9_1_0.dll
-
Size
25KB
-
MD5
8f62cec35733b1d4839bf8b86f1de771
-
SHA1
843b6cea94a47d1e013b8f65051398052ce9ba57
-
SHA256
b8be1a241fde00955c62a93ff6b4d54b58cadb790f2cb7991137911f070a52de
-
SHA512
a5678eb465c4b9977e65f29c681a52d5a738e7823da4b2c6d42ee02fa8c5ce04d56bae8c90f9d1f82601cf44ae173d3a530478d516ff7ade2033313a8c5fa995
-
SSDEEP
384:8pRgFrFGE3rwCryUmkMM5/Mg3NX5nuqLPZtxQSum6JRitjInacQshLSbeA:v4kMe/j3eCxR6lSEz
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2924 wrote to memory of 2936 2924 rundll32.exe 28 PID 2924 wrote to memory of 2936 2924 rundll32.exe 28 PID 2924 wrote to memory of 2936 2924 rundll32.exe 28 PID 2924 wrote to memory of 2936 2924 rundll32.exe 28 PID 2924 wrote to memory of 2936 2924 rundll32.exe 28 PID 2924 wrote to memory of 2936 2924 rundll32.exe 28 PID 2924 wrote to memory of 2936 2924 rundll32.exe 28