Overview
overview
6Static
static
3processlas...64.exe
windows7-x64
4processlas...64.exe
windows10-2004-x64
4$PLUGINSDIR/INetC.dll
windows7-x64
3$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3CPUEater.exe
windows7-x64
1CPUEater.exe
windows10-2004-x64
1Insights.exe
windows7-x64
1Insights.exe
windows10-2004-x64
1InstallHelper.exe
windows7-x64
1InstallHelper.exe
windows10-2004-x64
1LogViewer.exe
windows7-x64
1LogViewer.exe
windows10-2004-x64
1ProcessGovernor.exe
windows7-x64
1ProcessGovernor.exe
windows10-2004-x64
1ProcessLasso.exe
windows7-x64
1ProcessLasso.exe
windows10-2004-x64
1ProcessLas...er.exe
windows7-x64
3ProcessLas...er.exe
windows10-2004-x64
5QuickUpgrade.exe
windows7-x64
6QuickUpgrade.exe
windows10-2004-x64
6ThreadRacer.exe
windows7-x64
1ThreadRacer.exe
windows10-2004-x64
1TweakScheduler.exe
windows7-x64
1TweakScheduler.exe
windows10-2004-x64
1bitsumsess...nt.exe
windows7-x64
1bitsumsess...nt.exe
windows10-2004-x64
1pl-update.cmd
windows7-x64
1pl-update.cmd
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10-04-2024 16:29
Static task
static1
Behavioral task
behavioral1
Sample
processlassosetup64.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
processlassosetup64.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/INetC.dll
Resource
win7-20240319-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
CPUEater.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
CPUEater.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Insights.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Insights.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
InstallHelper.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
InstallHelper.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
LogViewer.exe
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
LogViewer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
ProcessGovernor.exe
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
ProcessGovernor.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
ProcessLasso.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
ProcessLasso.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
ProcessLassoLauncher.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
ProcessLassoLauncher.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
QuickUpgrade.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
QuickUpgrade.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
ThreadRacer.exe
Resource
win7-20240319-en
Behavioral task
behavioral26
Sample
ThreadRacer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
TweakScheduler.exe
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
TweakScheduler.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
bitsumsessionagent.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
bitsumsessionagent.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
pl-update.cmd
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
pl-update.cmd
Resource
win10v2004-20240226-en
General
-
Target
CPUEater.exe
-
Size
490KB
-
MD5
27bbb22da491eedb0c0b87de0516218e
-
SHA1
33dc0706ce7b9525ec3fb9f3275b414d6169455f
-
SHA256
0f1fddf131e9e75e787393588846e4bca08120b41f3e69c3a514b9fe5ea7db8a
-
SHA512
a5aba70f8daf8c9640e481f46c2d76e36aa3061a8c64e715e4e27ef73ce9b2d03ed9963696b91233b0722a450338fff1fb06ef0d7d3df4d89665acf4c089ba28
-
SSDEEP
6144:7+O9eBwatRqIx8xUbjqc44pWWXwAdfNNGvsXIw/0WKprM5B7VPShrkY:7UBwSLsw+c44p/XwAVNYrw/0ZM5p2YY
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 CPUEater.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString CPUEater.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe 1964 CPUEater.exe