Overview
overview
10Static
static
10serorox.zip
windows7-x64
1serorox.zip
windows10-2004-x64
1Release/Co...ingw.h
windows7-x64
3Release/Co...ingw.h
windows10-2004-x64
3Release/Co...sert.h
windows7-x64
3Release/Co...sert.h
windows10-2004-x64
3Release/Co...onio.h
windows7-x64
3Release/Co...onio.h
windows10-2004-x64
3Release/Co...type.h
windows7-x64
3Release/Co...type.h
windows10-2004-x64
3Release/Co.../dir.h
windows7-x64
3Release/Co.../dir.h
windows10-2004-x64
3Release/Co...rect.h
windows7-x64
3Release/Co...rect.h
windows10-2004-x64
3Release/Co...rent.h
windows7-x64
3Release/Co...rent.h
windows10-2004-x64
3Release/Co.../dos.h
windows7-x64
3Release/Co.../dos.h
windows10-2004-x64
3Release/Co...rrno.h
windows7-x64
3Release/Co...rrno.h
windows10-2004-x64
3Release/Co...xcpt.h
windows7-x64
3Release/Co...xcpt.h
windows10-2004-x64
3Release/Co...cntl.h
windows7-x64
3Release/Co...cntl.h
windows10-2004-x64
3Release/Co...fenv.h
windows7-x64
3Release/Co...fenv.h
windows10-2004-x64
3Release/Co...loat.h
windows7-x64
3Release/Co...loat.h
windows10-2004-x64
3Release/Co...ypes.h
windows7-x64
3Release/Co...ypes.h
windows10-2004-x64
3Release/Co...e/io.h
windows7-x64
3Release/Co...e/io.h
windows10-2004-x64
3Analysis
- max time kernel
143s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240419-en - resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system - submitted
03/05/2024, 00:42
Behavioral task
behavioral1
Sample
serorox.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
serorox.zip
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Release/Compilers/tinycc/include/_mingw.h
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Release/Compilers/tinycc/include/_mingw.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Release/Compilers/tinycc/include/assert.h
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Release/Compilers/tinycc/include/assert.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Release/Compilers/tinycc/include/conio.h
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Release/Compilers/tinycc/include/conio.h
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
Release/Compilers/tinycc/include/ctype.h
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Release/Compilers/tinycc/include/ctype.h
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
Release/Compilers/tinycc/include/dir.h
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Release/Compilers/tinycc/include/dir.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
Release/Compilers/tinycc/include/direct.h
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Release/Compilers/tinycc/include/direct.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
Release/Compilers/tinycc/include/dirent.h
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
Release/Compilers/tinycc/include/dirent.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
Release/Compilers/tinycc/include/dos.h
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
Release/Compilers/tinycc/include/dos.h
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Release/Compilers/tinycc/include/errno.h
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
Release/Compilers/tinycc/include/errno.h
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
Release/Compilers/tinycc/include/excpt.h
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Release/Compilers/tinycc/include/excpt.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
Release/Compilers/tinycc/include/fcntl.h
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Release/Compilers/tinycc/include/fcntl.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
Release/Compilers/tinycc/include/fenv.h
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
Release/Compilers/tinycc/include/fenv.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
Release/Compilers/tinycc/include/float.h
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Release/Compilers/tinycc/include/float.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral29
Sample
Release/Compilers/tinycc/include/inttypes.h
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
Release/Compilers/tinycc/include/inttypes.h
Resource
win10v2004-20240419-en
Behavioral task
behavioral31
Sample
Release/Compilers/tinycc/include/io.h
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
Release/Compilers/tinycc/include/io.h
Resource
win10v2004-20240426-en
General
- Target Release/Compilers/tinycc/include/inttypes.h
- Size 5KB
- Sample240503-a2rnmscg34
- SHA256 4194c0408cdba330b7cfa1d2091d72a0cfbf2077ff1feb19f436f3f3aa2adf18
- MD5 6bb72461c8c72cc3b96f78c73fa803ba
- SHA1 4506fb8bfa1622d4533db176b3dcfab0ae021672
- SHA512 5f6d95651183fbce7490a619d37672f2d3bac516319d0edcd4e782a77632b457632eb83ab54b67132752649fbbfbd1d4eb2b4aba2622bdf729f0c4bd7509db2b
- SSDEEP 96:a0GgtlRUn9ZpD5AgcpqdvDp/pwZzSAGkKTskBkbBpbwlHrhchgM2bRBhuYBbV3VU:a0GgJUn9ZpD+gcpqdvDp/pwZzP1iskSX
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-877519540-908060166-1852957295-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-877519540-908060166-1852957295-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2168 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Release\Compilers\tinycc\include\inttypes.h1⤵
- Modifies registry class
PID:1256
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2168