Overview
overview
7Static
static
3Vedani-Cry...er.exe
windows7-x64
7Vedani-Cry...er.exe
windows10-2004-x64
7Vedani-Cry...UI.dll
windows7-x64
1Vedani-Cry...UI.dll
windows10-2004-x64
1Vedani-Cry...on.exe
windows7-x64
7Vedani-Cry...on.exe
windows10-2004-x64
7Vedani-Cry...ce.exe
windows7-x64
1Vedani-Cry...ce.exe
windows10-2004-x64
1Resubmissions
19-04-2024 17:02
240419-vkeb7saa45 7Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
19-04-2024 17:02
Behavioral task
behavioral1
Sample
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/Vedani-Crypter.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/Vedani-Crypter.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/XanderUI.dll
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/XanderUI.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/libs/obsfucation.exe
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/libs/obsfucation.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/libs/source.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/libs/source.exe
Resource
win10v2004-20240412-en
General
-
Target
Vedani-Crypter-Vedani-Crypter/Vedani-Crypter/Vedani-Crypter.exe
-
Size
6.2MB
-
MD5
f982e40c831cac8ad143723b49990772
-
SHA1
e50f97163936e22cf9012b883f73a0eeaf4d90ad
-
SHA256
13a169db433164fda1023703b80b6dba5fbd1bb1b2fa37a71a0749024f783c2b
-
SHA512
6c1de77ae2e5376515ad278abdd2d539e9200b3bf1640174e721fef9a9bb2e8f87766b1d62e54917aaea331b839bcba798ca50ba06fa4f0602f12a75bcd63cc7
-
SSDEEP
98304:RM3epzb71QGQCPDbZfHayCb7BJ5mjwNwwMeZYobSr+v+Z5OwXbJ:RMsdQmRfaycBIGpEogMwXb
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
Vedani-Crypter.exepid process 2852 Vedani-Crypter.exe -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
Vedani-Crypter.exedescription pid process target process PID 2904 wrote to memory of 2852 2904 Vedani-Crypter.exe Vedani-Crypter.exe PID 2904 wrote to memory of 2852 2904 Vedani-Crypter.exe Vedani-Crypter.exe PID 2904 wrote to memory of 2852 2904 Vedani-Crypter.exe Vedani-Crypter.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Vedani-Crypter-Vedani-Crypter\Vedani-Crypter\Vedani-Crypter.exe"C:\Users\Admin\AppData\Local\Temp\Vedani-Crypter-Vedani-Crypter\Vedani-Crypter\Vedani-Crypter.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Vedani-Crypter-Vedani-Crypter\Vedani-Crypter\Vedani-Crypter.exe"C:\Users\Admin\AppData\Local\Temp\Vedani-Crypter-Vedani-Crypter\Vedani-Crypter\Vedani-Crypter.exe"2⤵
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\_MEI29042\python310.dllFilesize
4.3MB
MD5deaf0c0cc3369363b800d2e8e756a402
SHA13085778735dd8badad4e39df688139f4eed5f954
SHA256156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d
SHA5125cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989