Overview
overview
7Static
static
3aa0bfa2a66...82.exe
windows7-x64
7aa0bfa2a66...82.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3DomaIQ.exe
windows7-x64
1DomaIQ.exe
windows10-2004-x64
1DomaIQ10.exe
windows7-x64
1DomaIQ10.exe
windows10-2004-x64
1OfferBroke...03.exe
windows7-x64
6OfferBroke...03.exe
windows10-2004-x64
6config.dll
windows7-x64
1config.dll
windows10-2004-x64
1routes.dll
windows7-x64
1routes.dll
windows10-2004-x64
1Analysis
-
max time kernel
146s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
27-02-2024 20:06
Static task
static1
Behavioral task
behavioral1
Sample
aa0bfa2a66ac906ce4805abc00fb4982.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa0bfa2a66ac906ce4805abc00fb4982.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
DomaIQ.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
DomaIQ.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
DomaIQ10.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
DomaIQ10.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
OfferBrokerage_14003.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
OfferBrokerage_14003.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
config.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
config.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
routes.dll
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
routes.dll
Resource
win10v2004-20240226-en
General
-
Target
DomaIQ10.exe
-
Size
340KB
-
MD5
dfe97aeef7e4bb36a261406bfb2db452
-
SHA1
f683c4b4c286b4c8dbcb809a4e676b43ea872e5b
-
SHA256
eafa2798644ec67fc72b1690e35b6ba2f73d759821f406c827b9f1543ef0d0d7
-
SHA512
9710067c7efe56b89b0540b19f39cb93794e13aee760ebf8ec3c5c4d546acada0741dcd9760f8ece6e4c64f42da5d0d28381b528c03c9fd6451eae3f05b6ef83
-
SSDEEP
6144:zhMOxSHkNks5mbndKmki95K4vemYxLCrUAj:fxSHkWRbdKmRntpFj
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3944 DomaIQ10.exe 3944 DomaIQ10.exe