be5c9e6777d553873639e727b3b98c629f7d8e3fb86d818d1561e055a1557116 | Triage

Submit
Reports

Overview

overview

8

Static

static

3

DeepwokenM....4.exe

windows7-x64

8

DeepwokenM....4.exe

windows10-2004-x64

7

DeepwokenM...er.exe

windows7-x64

7

DeepwokenM...er.exe

windows10-2004-x64

7

DeepwokenM...ME.txt

windows7-x64

1

DeepwokenM...ME.txt

windows10-2004-x64

1

DeepwokenM...ox.dll

windows7-x64

1

DeepwokenM...ox.dll

windows10-2004-x64

1

DeepwokenM...ns.dll

windows7-x64

1

DeepwokenM...ns.dll

windows10-2004-x64

1

DeepwokenM...on.dll

windows7-x64

1

DeepwokenM...on.dll

windows10-2004-x64

1

DeepwokenM...UI.dll

windows7-x64

1

DeepwokenM...UI.dll

windows10-2004-x64

1

DeepwokenM...le.dll

windows7-x64

1

DeepwokenM...le.dll

windows10-2004-x64

1

DeepwokenM...ty.dll

windows7-x64

1

DeepwokenM...ty.dll

windows10-2004-x64

1

DeepwokenM...rk.dll

windows7-x64

1

DeepwokenM...rk.dll

windows10-2004-x64

1

DeepwokenM...ir.png

windows7-x64

3

DeepwokenM...ir.png

windows10-2004-x64

3

DeepwokenM...ua.xml

windows7-x64

1

DeepwokenM...ua.xml

windows10-2004-x64

1

DeepwokenM...AP.txt

windows7-x64

1

DeepwokenM...AP.txt

windows10-2004-x64

1

DeepwokenM...gs.txt

windows7-x64

1

DeepwokenM...gs.txt

windows10-2004-x64

1

DeepwokenM...VH.txt

windows7-x64

1

DeepwokenM...VH.txt

windows10-2004-x64

1

Resubmissions

18/04/2024, 09:57

240418-lzcx9ahg47 7

18/04/2024, 09:53

240418-lwy2baah9w 8

Analysis

max time kernel
139s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
18/04/2024, 09:53

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

DeepwokenMaster/Bloxstrap-v2.5.4.exe

Resource

win7-20240221-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

DeepwokenMaster/Bloxstrap-v2.5.4.exe

Resource

win10v2004-20240412-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

DeepwokenMaster/Loader.exe

Resource

win7-20240221-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

DeepwokenMaster/Loader.exe

Resource

win10v2004-20240412-en

discovery spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral5

Sample

DeepwokenMaster/README.txt

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

DeepwokenMaster/README.txt

Resource

win10v2004-20240412-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

DeepwokenMaster/bin/FastColoredTextBox.dll

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

DeepwokenMaster/bin/FastColoredTextBox.dll

Resource

win10v2004-20240412-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

DeepwokenMaster/bin/Microsoft.Expression.Interactions.dll

Resource

win7-20240319-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

DeepwokenMaster/bin/Microsoft.Expression.Interactions.dll

Resource

win10v2004-20240412-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

DeepwokenMaster/bin/Newtonsoft.Json.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

DeepwokenMaster/bin/Newtonsoft.Json.dll

Resource

win10v2004-20240412-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

DeepwokenMaster/bin/Siticone.UI.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

DeepwokenMaster/bin/Siticone.UI.dll

Resource

win10v2004-20240412-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

DeepwokenMaster/bin/System.ValueTuple.dll

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

DeepwokenMaster/bin/System.ValueTuple.dll

Resource

win10v2004-20240412-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

DeepwokenMaster/bin/System.Windows.Interactivity.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

DeepwokenMaster/bin/System.Windows.Interactivity.dll

Resource

win10v2004-20240412-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

DeepwokenMaster/bin/WPFSpark.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

DeepwokenMaster/bin/WPFSpark.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

DeepwokenMaster/bin/crosshair/crosshair.png

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

DeepwokenMaster/bin/crosshair/crosshair.png

Resource

win10v2004-20240412-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

DeepwokenMaster/bin/lua.xml

Resource

win7-20240319-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

DeepwokenMaster/bin/lua.xml

Resource

win10v2004-20240412-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

DeepwokenMaster/configs/CUSTOMAP.txt

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

DeepwokenMaster/configs/CUSTOMAP.txt

Resource

win10v2004-20240412-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

DeepwokenMaster/configs/Settings.txt

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

DeepwokenMaster/configs/Settings.txt

Resource

win10v2004-20240412-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

DeepwokenMaster/configs/teroll_HVH.txt

Resource

win7-20240215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

DeepwokenMaster/configs/teroll_HVH.txt

Resource

win10v2004-20240412-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

DeepwokenMaster/bin/WPFSpark.dll
Size

161KB
MD5

12bcf281c0eaad470e7aac6bf6f9c2c0
SHA1

8271c9eb67217b10a7dd0a2749232e6282201de5
SHA256

3883c938b4314caa30562893e122cc14cb54c0ddc96da085358c493169c44261
SHA512

ac357b097af5d7b5d8ce7e7cbb87eab6710e16b502bb52181f72c52696d1646759d8e57f7bbd7baaae16c02376d97672ea7f6e3357150ccc59b6d892a884a7b4
SSDEEP

3072:qbHZHvFmBSM0QZk6jGMKP15DEP037wvcozX+WtAELevcHzYkh9R2/dL8dDxV4cC0:qbHxvK0l6yMKt5DEP03svcozX+WtAEy1

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\DeepwokenMaster\bin\WPFSpark.dll,#1
1⤵
PID:468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4144 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8
1⤵
PID:4996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy