Overview
overview
10Static
static
7TheMalware...20.exe
windows7-x64
4TheMalware...20.exe
windows10-2004-x64
7TheMalware...om.bat
windows7-x64
1TheMalware...om.bat
windows10-2004-x64
1TheMalware...er.exe
windows7-x64
TheMalware...er.exe
windows10-2004-x64
TheMalware.../1.vbs
windows7-x64
1TheMalware.../1.vbs
windows10-2004-x64
1TheMalware...ad.exe
windows7-x64
8TheMalware...ad.exe
windows10-2004-x64
8TheMalware...os.vbs
windows7-x64
1TheMalware...os.vbs
windows10-2004-x64
1TheMalware...er.hta
windows7-x64
1TheMalware...er.hta
windows10-2004-x64
3TheMalware...r.html
windows7-x64
1TheMalware...r.html
windows10-2004-x64
1TheMalware...in.bat
windows7-x64
TheMalware...in.bat
windows10-2004-x64
TheMalware...ix.bat
windows7-x64
1TheMalware...ix.bat
windows10-2004-x64
1TheMalware...er.exe
windows7-x64
1TheMalware...er.exe
windows10-2004-x64
1TheMalware...er.exe
windows7-x64
5TheMalware...er.exe
windows10-2004-x64
5TheMalware.../o.vbs
windows7-x64
1TheMalware.../o.vbs
windows10-2004-x64
1TheMalware...op.vbs
windows7-x64
1TheMalware...op.vbs
windows10-2004-x64
TheMalware...om.vbs
windows7-x64
1TheMalware...om.vbs
windows10-2004-x64
1TheMalware...es.exe
windows7-x64
7TheMalware...es.exe
windows10-2004-x64
7Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
02-03-2024 20:29
Behavioral task
behavioral1
Sample
TheMalwaredev-s-garbage-main/Install Windows20.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
TheMalwaredev-s-garbage-main/Install Windows20.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
TheMalwaredev-s-garbage-main/Install Windows20/doom.bat
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
TheMalwaredev-s-garbage-main/Install Windows20/doom.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer.exe
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/1.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/1.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/dead.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/dead.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/dos.vbs
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/dos.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/explorer.hta
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/explorer.hta
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/explorer.html
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/explorer.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/main.bat
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/main.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/matrix.bat
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/matrix.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/melter.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/melter.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/mover.exe
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/mover.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/o.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/o.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/op.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/op.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/random.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/random.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/res.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
TheMalwaredev-s-garbage-main/Install Windows20/installer/res.exe
Resource
win10v2004-20240226-en
General
-
Target
TheMalwaredev-s-garbage-main/Install Windows20.exe
-
Size
24.4MB
-
MD5
8c7065d7b4ce7f50e145bd6082204b00
-
SHA1
40e4bea57fc03d3bed8b4614ec790242cc0650f5
-
SHA256
9b66b0914cad75dd3072726f0a7b3d21db55bd205f409a6ca46472cfe2a78eec
-
SHA512
560a438e307e217875a8a9227187e22027dc48c58b9fe1041361d6d8a5cb917728ae22655af084f9b38e45928a7ba1b15eab6e7c2d4d6862391e82eba00583f6
-
SSDEEP
786432:KJ4Hil5v88iWkupGx7xvkCBiWP9BKBB5zw8:K2CfiWRMaCBiW1+59
Malware Config
Signatures
-
Drops file in Windows directory 6 IoCs
Processes:
Install Windows20.exedescription ioc process File opened for modification C:\Windows\SystemUpdateInstalled Install Windows20.exe File created C:\Windows\SystemUpdateInstalled\__tmp_rar_sfx_access_check_259397604 Install Windows20.exe File created C:\Windows\SystemUpdateInstalled\doom.bat Install Windows20.exe File opened for modification C:\Windows\SystemUpdateInstalled\doom.bat Install Windows20.exe File created C:\Windows\SystemUpdateInstalled\installer.exe Install Windows20.exe File opened for modification C:\Windows\SystemUpdateInstalled\installer.exe Install Windows20.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
Install Windows20.exedescription pid process target process PID 2208 wrote to memory of 1144 2208 Install Windows20.exe cmd.exe PID 2208 wrote to memory of 1144 2208 Install Windows20.exe cmd.exe PID 2208 wrote to memory of 1144 2208 Install Windows20.exe cmd.exe PID 2208 wrote to memory of 1144 2208 Install Windows20.exe cmd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\TheMalwaredev-s-garbage-main\Install Windows20.exe"C:\Users\Admin\AppData\Local\Temp\TheMalwaredev-s-garbage-main\Install Windows20.exe"1⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:2208 -
C:\Windows\SysWOW64\cmd.execmd /c ""C:\Windows\SystemUpdateInstalled\doom.bat" "2⤵PID:1144
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
824B
MD587ff7a4be8ba06c3d469b27fc8d665bc
SHA12ddb2e14bb115a85b13cfbe6204a45360c78de04
SHA256c5e12fc8cceb6155d5176025c3aeff5e3d8aef8e54e6eabf5af43f19329a634b
SHA51238a8d7ccc7f447b9e7b61d7f876a4f6de9782b09d1491e93bd0fcd3e15b6552cd6cfe015b020686eecea14a0951ed392abae55490b55af9c393eb02530632c35