Overview
overview
7Static
static
315 Cable 4...n.pptx
windows7-x64
115 Cable 4...n.pptx
windows10-2004-x64
115 Cable 4...1n.ttf
windows7-x64
315 Cable 4...1n.ttf
windows10-2004-x64
715 Cable 4...e4.exe
windows7-x64
115 Cable 4...e4.exe
windows10-2004-x64
115 Cable 4...32.dll
windows7-x64
315 Cable 4...32.dll
windows10-2004-x64
315 Cable 4...ay.dll
windows7-x64
115 Cable 4...ay.dll
windows10-2004-x64
115 Cable 4...mm.dll
windows7-x64
115 Cable 4...mm.dll
windows10-2004-x64
115 Cable 4...32.dll
windows7-x64
115 Cable 4...32.dll
windows10-2004-x64
315 Cable 4...mm.dll
windows7-x64
115 Cable 4...mm.dll
windows10-2004-x64
115 Cable 4...ue.htm
windows7-x64
115 Cable 4...ue.htm
windows10-2004-x64
115 Cable 4...ue.pdf
windows7-x64
115 Cable 4...ue.pdf
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
25-04-2024 09:30
Static task
static1
Behavioral task
behavioral1
Sample
15 Cable 4.0/Cable 4 instruction.pptx
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15 Cable 4.0/Cable 4 instruction.pptx
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
15 Cable 4.0/Cable1251n.ttf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
15 Cable 4.0/Cable1251n.ttf
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
15 Cable 4.0/Cable4.exe
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
15 Cable 4.0/Cable4.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
15 Cable 4.0/INETWH32.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
15 Cable 4.0/INETWH32.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
15 Cable 4.0/Rhmmplay.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
15 Cable 4.0/Rhmmplay.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
15 Cable 4.0/borlndmm.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
15 Cable 4.0/borlndmm.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
15 Cable 4.0/cable32.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
15 Cable 4.0/cable32.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
15 Cable 4.0/delphimm.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
15 Cable 4.0/delphimm.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
15 Cable 4.0/rhodiatongue.htm
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
15 Cable 4.0/rhodiatongue.htm
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
15 Cable 4.0/rhodiatongue.pdf
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
15 Cable 4.0/rhodiatongue.pdf
Resource
win10v2004-20240412-en
General
-
Target
15 Cable 4.0/borlndmm.dll
-
Size
18KB
-
MD5
ded1c6d9dedad4357cb852524b195e81
-
SHA1
1304f8c2ee6eeeee037fba24ebd081b687a4803f
-
SHA256
4b531ac5e9be73d2038e308c44155f559181f17c50b985ca80a99908c38fa3d5
-
SHA512
9569d3823c610460c1713a3598402e6ccd8912e2be3f77bae365cd65340f0a6931f7d9637fa824812e211ed1c66b8dc09c06b60dc52d1d7b810ec86250954350
-
SSDEEP
384:nNEWMQqKcECEDyzNwEk9UUiK6RmXBEe8m+HRiTn:eWMQqlECwyzyEtVT0Ke8ZHkL
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 1412 wrote to memory of 3624 1412 rundll32.exe rundll32.exe PID 1412 wrote to memory of 3624 1412 rundll32.exe rundll32.exe PID 1412 wrote to memory of 3624 1412 rundll32.exe rundll32.exe