Overview

overview

7

Static

static

3

CrashReporter.NET.dll

windows7-x64

1

CrashReporter.NET.dll

windows10-2004-x64

1

DiscordRPC.dll

windows7-x64

1

DiscordRPC.dll

windows10-2004-x64

1

DotNetProj...ge.dll

windows7-x64

1

DotNetProj...ge.dll

windows10-2004-x64

1

Dragablz.dll

windows7-x64

1

Dragablz.dll

windows10-2004-x64

1

Jupiter.dll

windows7-x64

1

Jupiter.dll

windows10-2004-x64

1

MaterialDe...rs.dll

windows7-x64

1

MaterialDe...rs.dll

windows10-2004-x64

1

MaterialDe...pf.dll

windows7-x64

1

MaterialDe...pf.dll

windows10-2004-x64

1

Memory.dll

windows7-x64

1

Memory.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

OctoSniff.exe

windows7-x64

6

OctoSniff.exe

windows10-2004-x64

6

OctoSniffo.exe

windows7-x64

1

OctoSniffo.exe

windows10-2004-x64

1

PLEASE_INS...ap.exe

windows7-x64

7

PLEASE_INS...ap.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$SYSDIR/Packet.dll

windows7-x64

1

$SYSDIR/Packet.dll

windows10-2004-x64

1

$SYSDIR/pthreadVC.dll

windows7-x64

1

$SYSDIR/pthreadVC.dll

windows10-2004-x64

1

$SYSDIR/wpcap.dll

windows7-x64

1

$SYSDIR/wpcap.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30-03-2024 07:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    OctoSniffo.exe

  • Size

    532KB

  • MD5

    a2836c96e7e8cd44c0db5b8921067115

  • SHA1

    fbafe49a6dd58f8b2208001ab2ba200ff5a32215

  • SHA256

    739314b192890c3db654eddbfeb11c172f4cc9ed761b79f6552126f031d8ff15

  • SHA512

    c9af6fe2ff98ec2d2b9c17873002430952c757fb632293cdc362b0c237b14c099759957eb2e98a8e704bc44555ff3aef21def2f64f831c77935769ce0c9660bd

  • SSDEEP

    12288:GiON6et/fGRZHeeP6S4hNS/CeguR5SoV58pf:Gft/+e0p4hNwCOOoV58pf

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\OctoSniffo.exe
    "C:\Users\Admin\AppData\Local\Temp\OctoSniffo.exe"
    1⤵
      PID:1952

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1952-0-0x0000000000D30000-0x0000000000DBC000-memory.dmp

      Filesize

      560KB

      Download

    • memory/1952-1-0x000007FEF5840000-0x000007FEF622C000-memory.dmp

      Filesize

      9.9MB

      Download

    • memory/1952-2-0x0000000002500000-0x0000000002580000-memory.dmp

      Filesize

      512KB

      Download

    • memory/1952-3-0x0000000000A30000-0x0000000000AFC000-memory.dmp

      Filesize

      816KB

      Download

    • memory/1952-8-0x000007FE96250000-0x000007FE962D0000-memory.dmp

      Filesize

      512KB

      Download

    • memory/1952-9-0x000007FE96250000-0x000007FE962D0000-memory.dmp

      Filesize

      512KB

      Download

    • memory/1952-10-0x000007FE96250000-0x000007FE962D0000-memory.dmp

      Filesize

      512KB

      Download

    • memory/1952-11-0x000007FE96250000-0x000007FE962D0000-memory.dmp

      Filesize

      512KB

      Download

    • memory/1952-12-0x0000000000550000-0x0000000000556000-memory.dmp

      Filesize

      24KB

      Download

    • memory/1952-13-0x0000000000560000-0x0000000000566000-memory.dmp

      Filesize

      24KB

      Download

    • memory/1952-14-0x000007FEF5840000-0x000007FEF622C000-memory.dmp

      Filesize

      9.9MB

      Download