Overview
overview
6Static
static
3download/M...rm.exe
windows7-x64
6download/M...rm.exe
windows10-2004-x64
6download/X...er.dll
windows7-x64
1download/X...er.dll
windows10-2004-x64
3download/X...rt.exe
windows7-x64
1download/X...rt.exe
windows10-2004-x64
1download/atl71.dll
windows7-x64
1download/atl71.dll
windows10-2004-x64
1download/d...id.dll
windows7-x64
1download/d...id.dll
windows10-2004-x64
1download/d...ne.dll
windows7-x64
1download/d...ne.dll
windows10-2004-x64
1download/minizip.dll
windows7-x64
1download/minizip.dll
windows10-2004-x64
3download/msvcp71.dll
windows7-x64
3download/msvcp71.dll
windows10-2004-x64
3download/msvcr71.dll
windows7-x64
3download/msvcr71.dll
windows10-2004-x64
3download/zlib1.dll
windows7-x64
3download/zlib1.dll
windows10-2004-x64
3Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
09/05/2024, 02:15
Static task
static1
Behavioral task
behavioral1
Sample
download/MiniThunderPlatform.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
download/MiniThunderPlatform.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
download/XLBugHandler.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
download/XLBugHandler.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
download/XLBugReport.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
download/XLBugReport.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
download/atl71.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
download/atl71.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
download/dl_peer_id.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
download/dl_peer_id.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
download/download_engine.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
download/download_engine.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
download/minizip.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
download/minizip.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
download/msvcp71.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
download/msvcp71.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
download/msvcr71.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
download/msvcr71.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
download/zlib1.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
download/zlib1.dll
Resource
win10v2004-20240508-en
General
-
Target
download/download_engine.dll
-
Size
3.2MB
-
MD5
4f71ad4fbe7b77fcd7471c1f57dd5a18
-
SHA1
27524b586c13a44de8a4a872cc613997983a79eb
-
SHA256
0f03f8a837d5632529e4b66f7aeed27eb6661dc9c3a41f31086a5b790e669e88
-
SHA512
9262409671dc4130841fd8d2a928c7ff4424a5ca2d1eae52f0834b89ab7f1c0b98db551512df13947411ae0fc3691614901ea0a778d58ed40c8bba2edf0eed81
-
SSDEEP
49152:TqENbUclxspcgkHS8TOOak6hseBWZgNFSB7U/x9JRm1XvXrQT2X30obD:TqEbxsp/ky8TOs6OeBkgzCt
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2080 wrote to memory of 2040 2080 regsvr32.exe 28 PID 2080 wrote to memory of 2040 2080 regsvr32.exe 28 PID 2080 wrote to memory of 2040 2080 regsvr32.exe 28 PID 2080 wrote to memory of 2040 2080 regsvr32.exe 28 PID 2080 wrote to memory of 2040 2080 regsvr32.exe 28 PID 2080 wrote to memory of 2040 2080 regsvr32.exe 28 PID 2080 wrote to memory of 2040 2080 regsvr32.exe 28