Overview
overview
7Static
static
7mc chet/Project4.dll
windows7-x64
1mc chet/Project4.dll
windows10-2004-x64
1mc chet/Pr...hl.exe
windows7-x64
7mc chet/Pr...hl.exe
windows10-2004-x64
7out.exe
windows7-x64
3out.exe
windows10-2004-x64
3mc chet/injmthd.ini
windows7-x64
1mc chet/injmthd.ini
windows10-2004-x64
1mc chet/mycfg.cfg
windows7-x64
3mc chet/mycfg.cfg
windows10-2004-x64
3mc chet/shiza.dll
windows7-x64
1mc chet/shiza.dll
windows10-2004-x64
1Analysis
-
max time kernel
69s -
max time network
71s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05-03-2024 13:14
Behavioral task
behavioral1
Sample
mc chet/Project4.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
mc chet/Project4.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
mc chet/Project4.hl.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
mc chet/Project4.hl.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
out.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
out.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
mc chet/injmthd.ini
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
mc chet/injmthd.ini
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
mc chet/mycfg.cfg
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
mc chet/mycfg.cfg
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
mc chet/shiza.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
mc chet/shiza.dll
Resource
win10v2004-20240226-en
General
-
Target
mc chet/Project4.hl.exe
-
Size
179KB
-
MD5
12b9674d5a68f829f20214644e67baa3
-
SHA1
9f2681173105f628c7cb14b57540121c5dc667dd
-
SHA256
88132922084d88a606d4430b1903c2c7d2b48e4b1467253c3a51ed00b05954c6
-
SHA512
c1c47d6d7f2ec3d2cf6a50fe85acab653a4e81d7c56a2f1972f7de0b686272c3cb03f59be9512acb4530b94bbe90d4b81b00682d4413ed62bc69b6033a43a073
-
SSDEEP
3072:O2qkbSLWyjCkRtc8lsAR8Z4GkZypFuX6HNwTBf0aeEus/aL:xH+ayW8fWOCDRY0ouAK
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/3924-0-0x0000000000F20000-0x0000000000F7F000-memory.dmp upx behavioral4/memory/3924-1-0x0000000000F20000-0x0000000000F7F000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe 3924 Project4.hl.exe