Overview
overview
7Static
static
3ace35a7519...d4.exe
windows7-x64
7ace35a7519...d4.exe
windows10-2004-x64
7$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...ge.dll
windows7-x64
3$PLUGINSDI...ge.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...te.dll
windows7-x64
1$PLUGINSDI...te.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$TEMP/nsisos.dll
windows7-x64
1$TEMP/nsisos.dll
windows10-2004-x64
1AddScheduler.exe
windows7-x64
1AddScheduler.exe
windows10-2004-x64
1AddScheduler_.exe
windows7-x64
1AddScheduler_.exe
windows10-2004-x64
1DrBoan.exe
windows7-x64
3DrBoan.exe
windows10-2004-x64
7DrBoanMon.exe
windows7-x64
3DrBoanMon.exe
windows10-2004-x64
3DrBoancfg.exe
windows7-x64
3DrBoancfg.exe
windows10-2004-x64
7Analysis
-
max time kernel
93s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/02/2024, 21:23
Static task
static1
Behavioral task
behavioral1
Sample
ace35a7519e1010bd00b7a8d610ec3d4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ace35a7519e1010bd00b7a8d610ec3d4.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DLLWebCount.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DLLWebCount.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/ExLicenseDrBoanPage.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ExLicenseDrBoanPage.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$TEMP/nsisos.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$TEMP/nsisos.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
AddScheduler.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
AddScheduler.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
AddScheduler_.exe
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
AddScheduler_.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
DrBoan.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
DrBoan.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
DrBoanMon.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
DrBoanMon.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
DrBoancfg.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
DrBoancfg.exe
Resource
win10v2004-20240226-en
General
-
Target
AddScheduler_.exe
-
Size
383KB
-
MD5
d039b1ad2817d551bf0f9e0f5f5a6321
-
SHA1
f83fb915221379efcc5c7137e841611c885d690e
-
SHA256
bb525c7b4ac418d3307ff61597c5c64dc65a3eada37b3fcebe084242418a6be0
-
SHA512
0caa7260a64e9d5ab9c4306e274e11d90f396382a665420e1409d83f815cb318eda04755255e138ab6db8854763915fc35787bc40d360b39ede7a2e3cd5d523b
-
SSDEEP
6144:l7GS1D7K18xPMQvF01cwaP0SCS8GMSQSlgTJ9Of+F/p/uwONct43D92Uo:Y8xPvv9P0SCS84l+TJ959pGHNu4B2Uo
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4160 AddScheduler_.exe