781b18859a09602c65cc40c5871e9fa6630e2ab43801a2005ffb0d35ec1b7307

Submit
Reports

Overview

overview

Static

static

GGM Remapp..._1.dll

windows7-x64

GGM Remapp..._1.dll

windows10-2004-x64

GGM Remapp...40.dll

windows7-x64

GGM Remapp...40.dll

windows10-2004-x64

GGM Remapp...rn.dll

windows7-x64

GGM Remapp...rn.dll

windows10-2004-x64

GGM Remapp...40.dll

windows7-x64

GGM Remapp...40.dll

windows10-2004-x64

GGM Remapp..._1.dll

windows7-x64

GGM Remapp..._1.dll

windows10-2004-x64

GGM Remapp..._2.dll

windows7-x64

GGM Remapp..._2.dll

windows10-2004-x64

GGM Remapp...it.dll

windows7-x64

GGM Remapp...it.dll

windows10-2004-x64

GGM Remapp...ds.dll

windows7-x64

GGM Remapp...ds.dll

windows10-2004-x64

GGM Remapp...81.dll

windows7-x64

GGM Remapp...81.dll

windows10-2004-x64

GGM Remapp...40.dll

windows7-x64

GGM Remapp...40.dll

windows10-2004-x64

GGM Remapp...ts.dll

windows7-x64

GGM Remapp...ts.dll

windows10-2004-x64

GGM Remapp...on.exe

windows7-x64

GGM Remapp...on.exe

windows10-2004-x64

GGM Remapp...on.dll

windows7-x64

GGM Remapp...on.dll

windows10-2004-x64

GGM Remapp...on.dll

windows7-x64

GGM Remapp...on.dll

windows10-2004-x64

GGM Remapp...PI.pdf

windows7-x64

GGM Remapp...PI.pdf

windows10-2004-x64

GGM Remapp...on.pdf

windows7-x64

GGM Remapp...on.pdf

windows10-2004-x64

Analysis

max time kernel
118s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/03/2024, 20:06

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

2 signatures

Behavioral task

behavioral1

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x64/native/vcruntime140_1.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x64/native/vcruntime140_1.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/concrt140.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/concrt140.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/cvextern.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/cvextern.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_1.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_1.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_2.dll

Resource

win7-20240215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_2.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_atomic_wait.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_atomic_wait.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_codecvt_ids.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_codecvt_ids.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/opencv_videoio_ffmpeg481.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/opencv_videoio_ffmpeg481.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/vcruntime140.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/vcruntime140.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

GGM Remapper V0791/GGM0791/runtimes/win/lib/net6.0/Microsoft.Win32.SystemEvents.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

GGM Remapper V0791/GGM0791/runtimes/win/lib/net6.0/Microsoft.Win32.SystemEvents.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

GGM Remapper V0791/Needed Drivers/Interception/command line installer/install-interception.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

GGM Remapper V0791/Needed Drivers/Interception/command line installer/install-interception.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

GGM Remapper V0791/Needed Drivers/Interception/library/x64/interception.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

GGM Remapper V0791/Needed Drivers/Interception/library/x64/interception.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

GGM Remapper V0791/Needed Drivers/Interception/library/x86/interception.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

GGM Remapper V0791/Needed Drivers/Interception/library/x86/interception.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

GGM Remapper V0791/Needed Drivers/Interception/licenses/commercial-usage/Interception API.pdf

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

GGM Remapper V0791/Needed Drivers/Interception/licenses/commercial-usage/Interception API.pdf

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral31

Sample

GGM Remapper V0791/Needed Drivers/Interception/licenses/commercial-usage/Interception.pdf

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

GGM Remapper V0791/Needed Drivers/Interception/licenses/commercial-usage/Interception.pdf

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

150 seconds

Report Analysis Logs

General

Target

GGM Remapper V0791/GGM0791/runtimes/win-x86/native/msvcp140_atomic_wait.dll
Size

45KB
MD5

7819ff30aadbb22dd6b86accdb223a22
SHA1

f4a8a8f5b3b9c7f83d7bbf5e42714fc14ce345df
SHA256

71820ba963f1fb9e6469b8895613ec59283332f2a9650d96c9abe1a01b7a513c
SHA512

6750130447a1fcad1142f54f0471bc11e793522eb81709dadbe403d863cd8e215c356baa4654992b40066daa4b7dde1e547e1f1112f0142b0a7c0c07a38c785b
SSDEEP

768:kgeNYb+ne4tyxI8diO/lc5iJoV+wwzlkbdii9zSw9bi9zn:kgjb+e48x8Otc5iJo0wwzlkBi+zSw9bQ

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2084 wrote to memory of 3056	2084	rundll32.exe	28
PID 2084 wrote to memory of 3056	2084	rundll32.exe	28
PID 2084 wrote to memory of 3056	2084	rundll32.exe	28
PID 2084 wrote to memory of 3056	2084	rundll32.exe	28
PID 2084 wrote to memory of 3056	2084	rundll32.exe	28
PID 2084 wrote to memory of 3056	2084	rundll32.exe	28
PID 2084 wrote to memory of 3056	2084	rundll32.exe	28

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\GGM Remapper V0791\GGM0791\runtimes\win-x86\native\msvcp140_atomic_wait.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2084
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\GGM Remapper V0791\GGM0791\runtimes\win-x86\native\msvcp140_atomic_wait.dll",#1
  2⤵
  PID:3056

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads