Analysis
-
max time kernel
30s -
max time network
30s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27/03/2024, 22:43
Behavioral task
behavioral1
Sample
Injector_warehub_1.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Injector_warehub_1.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
out.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
out.exe
Resource
win10v2004-20240226-en
0 signatures
150 seconds
General
-
Target
Injector_warehub_1.exe
-
Size
288KB
-
MD5
d098c0bf1c83217584e2e38734627a7f
-
SHA1
4902792181f976bdc8f76f80a42a13d7f34d5714
-
SHA256
ad6e7b84ce21f9670bf8f0a2a980d72363d06ae7213cc495ba9e88fa6da2f511
-
SHA512
ff75c6c334f8e542beeff11464dabbc320bd2b980d2021e6123e9d1f33f4d57fc8fded93280b5c96d91564636222931177bb6d98ea60400612fdc7dd3e9deb44
-
SSDEEP
6144:5/mdjrF9mqUh9C0zA+C/gEMS9WhaCtHhBDuZsGZe2KL8:5/mXTs7SAaqGZf
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2420-0-0x00007FF70A560000-0x00007FF70A5F6000-memory.dmp upx behavioral2/memory/2420-2-0x00007FF70A560000-0x00007FF70A5F6000-memory.dmp upx -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\IME\warehub.dll Injector_warehub_1.exe -
Suspicious behavior: EnumeratesProcesses 24 IoCs
pid Process 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe 2420 Injector_warehub_1.exe