Overview
overview
7Static
static
7mc chet/Project4.dll
windows7-x64
1mc chet/Project4.dll
windows10-2004-x64
1mc chet/Pr...hl.exe
windows7-x64
7mc chet/Pr...hl.exe
windows10-2004-x64
7out.exe
windows7-x64
3out.exe
windows10-2004-x64
3mc chet/injmthd.ini
windows7-x64
1mc chet/injmthd.ini
windows10-2004-x64
1mc chet/mycfg.cfg
windows7-x64
3mc chet/mycfg.cfg
windows10-2004-x64
3mc chet/shiza.dll
windows7-x64
1mc chet/shiza.dll
windows10-2004-x64
1Analysis
-
max time kernel
43s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-03-2024 13:14
Behavioral task
behavioral1
Sample
mc chet/Project4.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
mc chet/Project4.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
mc chet/Project4.hl.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
mc chet/Project4.hl.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
out.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
out.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
mc chet/injmthd.ini
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
mc chet/injmthd.ini
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
mc chet/mycfg.cfg
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
mc chet/mycfg.cfg
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
mc chet/shiza.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
mc chet/shiza.dll
Resource
win10v2004-20240226-en
General
-
Target
out.exe
-
Size
190KB
-
MD5
541fcba91b4381411b2b28754e82bed2
-
SHA1
3eac669a3dd83faa6a03e5fc4427fcb510cc8e78
-
SHA256
fae8c3960b919221e12d8b5084732e0188d4a5eec8bde1429564925ee80987fd
-
SHA512
bb90ec63fbd87989057d57b9203a516fa47c48be5ea681d3032806e4ee32b1893cb8bb8eefaf95a81038cd7e865b93cbbed1432faafce7a7d4b8f3bb52d2717e
-
SSDEEP
3072:ppiebSLWyjCkRtc8lsAR8Z4GkZypFuX6HNwTBf0aeEus/aL:pYe+ayW8fWOCDRY0ouAK
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2172 3008 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3008 wrote to memory of 2172 3008 out.exe 29 PID 3008 wrote to memory of 2172 3008 out.exe 29 PID 3008 wrote to memory of 2172 3008 out.exe 29 PID 3008 wrote to memory of 2172 3008 out.exe 29