Overview
overview
7Static
static
3binmaster-...xe.zip
windows7-x64
1binmaster-...xe.zip
windows10-2004-x64
1binmaster-...in.exe
windows7-x64
1binmaster-...in.exe
windows10-2004-x64
1config.json
windows7-x64
3config.json
windows10-2004-x64
3filter.json
windows7-x64
3filter.json
windows10-2004-x64
3public/ansiHTML.js
windows7-x64
1public/ansiHTML.js
windows10-2004-x64
1public/auc...wer.js
windows7-x64
1public/auc...wer.js
windows10-2004-x64
1public/index.html
windows7-x64
1public/index.html
windows10-2004-x64
1public/mc.otf
windows7-x64
3public/mc.otf
windows10-2004-x64
7public/password.js
windows7-x64
1public/password.js
windows10-2004-x64
1public/soc...ion.js
windows7-x64
1public/soc...ion.js
windows10-2004-x64
1public/stats.js
windows7-x64
1public/stats.js
windows10-2004-x64
1public/style.css
windows7-x64
3public/style.css
windows10-2004-x64
7public/tabs.js
windows7-x64
1public/tabs.js
windows10-2004-x64
1public/timer.js
windows7-x64
1public/timer.js
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/03/2024, 23:51
Static task
static1
Behavioral task
behavioral1
Sample
binmaster-auction-win.exe.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
binmaster-auction-win.exe.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
binmaster-auction-win.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
binmaster-auction-win.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
config.json
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
config.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
filter.json
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
filter.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
public/ansiHTML.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
public/ansiHTML.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
public/auctionViewer.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
public/auctionViewer.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
public/index.html
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
public/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
public/mc.otf
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
public/mc.otf
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
public/password.js
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
public/password.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
public/socketIntegration.js
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
public/socketIntegration.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
public/stats.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
public/stats.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
public/style.css
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
public/style.css
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
public/tabs.js
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
public/tabs.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
public/timer.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
public/timer.js
Resource
win10v2004-20240226-en
General
-
Target
public/mc.otf
-
Size
10KB
-
MD5
2c90030680a2fafd21f53fd39a0862e7
-
SHA1
1fcfab46713874334de3ab8e6cd8029154bc057f
-
SHA256
c5bcd562c9151e23deb35ce8fb069bf3f8d22e1b71f0e2b70e253ee3925c2174
-
SHA512
a48ef138db40d54b88e0c2d1a0dada18dcc470f0c2d542ec71c186f1693634828d71bc59f7800479eb2e0d2c67a22f87b95da562797b11b5532f865d0aa2baae
-
SSDEEP
192:6A/wWJ438XVn5arm7QUszRwmvUoMhEXPnlxQb2koCcJh8p:6gMGky7nyRlUoEEXPzQbFoCyh8p
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2576 wrote to memory of 2548 2576 cmd.exe 30 PID 2576 wrote to memory of 2548 2576 cmd.exe 30 PID 2576 wrote to memory of 2548 2576 cmd.exe 30