Overview
overview
10Static
static
1client32/A...re.dll
windows7-x64
1client32/A...re.dll
windows10-2004-x64
1client32/HTCTL32.dll
windows7-x64
3client32/HTCTL32.dll
windows10-2004-x64
3client32/PCICHEK.dll
windows7-x64
1client32/PCICHEK.dll
windows10-2004-x64
1client32/PCICL32.dll
windows7-x64
1client32/PCICL32.dll
windows10-2004-x64
1client32/client32.exe
windows7-x64
10client32/client32.exe
windows10-2004-x64
10client32/msvcr100.dll
windows7-x64
3client32/msvcr100.dll
windows10-2004-x64
3client32/pcicapi.dll
windows7-x64
1client32/pcicapi.dll
windows10-2004-x64
1Analysis
-
max time kernel
66s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
30-04-2024 01:13
Static task
static1
Behavioral task
behavioral1
Sample
client32/AudioCapture.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
client32/AudioCapture.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
client32/HTCTL32.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
client32/HTCTL32.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
client32/PCICHEK.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
client32/PCICHEK.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
client32/PCICL32.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
client32/PCICL32.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
client32/client32.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
client32/client32.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
client32/msvcr100.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
client32/msvcr100.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
client32/pcicapi.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
client32/pcicapi.dll
Resource
win10v2004-20240419-en
General
-
Target
client32/PCICL32.dll
-
Size
3.3MB
-
MD5
df45089846f1fcbe66491ff76cf9fc6d
-
SHA1
b3a888033434ef712f3acc11612e8eec41b82d91
-
SHA256
128ad8b4b8f5975ab122564f726a2449e24a043021d2a671750312636a18a358
-
SHA512
30fbeea89e1f0e931a3e53252de12b31da478e61b101173c9819c8d3968bf44672b98c449b07c0728cb25b08e3a879ac146c6950eeec6fc62dfb53f809c95495
-
SSDEEP
49152:BWMA61yiaB6FnebgvDYUEuyiN1MpwYSNGrUqZ9AtXFshTIwiasclST3/:BKCyipe0/hyiN1MpjWWmtXXeSj
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3124 wrote to memory of 2716 3124 rundll32.exe 84 PID 3124 wrote to memory of 2716 3124 rundll32.exe 84 PID 3124 wrote to memory of 2716 3124 rundll32.exe 84