Overview
overview
7Static
static
3c7b0a4d4dc...99.exe
windows7-x64
3c7b0a4d4dc...99.exe
windows10-2004-x64
3$SYSDIR/Ba...er.scr
windows7-x64
1$SYSDIR/Ba...er.scr
windows10-2004-x64
1$TEMP/dospop.exe
windows7-x64
7$TEMP/dospop.exe
windows10-2004-x64
7tbu03852/dospop.dll
windows7-x64
6tbu03852/dospop.dll
windows10-2004-x64
6tbu03852/options.html
windows7-x64
1tbu03852/options.html
windows10-2004-x64
1tbu03852/s...g.html
windows7-x64
1tbu03852/s...g.html
windows10-2004-x64
1tbu03852/s...b.html
windows7-x64
1tbu03852/s...b.html
windows10-2004-x64
1tbu03852/tbhelper.dll
windows7-x64
1tbu03852/tbhelper.dll
windows10-2004-x64
1tbu03852/t...091.js
windows7-x64
1tbu03852/t...091.js
windows10-2004-x64
1tbu03852/u...ll.exe
windows7-x64
1tbu03852/u...ll.exe
windows10-2004-x64
1tbu03852/update.exe
windows7-x64
1tbu03852/update.exe
windows10-2004-x64
1Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7Analysis
-
max time kernel
120s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14-03-2024 04:28
Static task
static1
Behavioral task
behavioral1
Sample
c7b0a4d4dc98801f9b51ea2fef75db99.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c7b0a4d4dc98801f9b51ea2fef75db99.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$SYSDIR/Bat_Screensaver.scr
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$SYSDIR/Bat_Screensaver.scr
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$TEMP/dospop.exe
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
$TEMP/dospop.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
tbu03852/dospop.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
tbu03852/dospop.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
tbu03852/options.html
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
tbu03852/options.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
tbu03852/static_img.html
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
tbu03852/static_img.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
tbu03852/static_pub.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
tbu03852/static_pub.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
tbu03852/tbhelper.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
tbu03852/tbhelper.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
tbu03852/tbs_include_script_008091.js
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
tbu03852/tbs_include_script_008091.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
tbu03852/uninstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
tbu03852/uninstall.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
tbu03852/update.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
tbu03852/update.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Uninstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Uninstall.exe
Resource
win10v2004-20240226-en
General
-
Target
$SYSDIR/Bat_Screensaver.scr
-
Size
3.3MB
-
MD5
1a1d04627e1d82f332249f33c873d3e8
-
SHA1
5865cb1b5341a85ad640acd04e5b136bb4df6e93
-
SHA256
db8cdec60ae79b0bfa021fc76fbe943e1763361d639ca22bbdb390cb614c54c9
-
SHA512
f8d6a92e8811b5c544f34c0b81d78d3bec6915513b1ebd54c91c9b984ed93d1d369a4769527a61e7f827df4f09d8481b8aba8ef637e23d37a7a3af43a2495cb0
-
SSDEEP
98304:WAGqZNWNm9yIMR8ZhmbH4Hza4ve7nEu6SkIP:7dZNWPCZhmbiuj7r3
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2888 Bat_Screensaver.scr 2888 Bat_Screensaver.scr 2888 Bat_Screensaver.scr