Overview
overview
4Static
static
3Hot CPU Te...ch.dll
windows7-x64
1Hot CPU Te...ch.dll
windows10-2004-x64
1Hot CPU Te...es.rtf
windows7-x64
4Hot CPU Te...es.rtf
windows10-2004-x64
1Hot CPU Te...er.exe
windows7-x64
1Hot CPU Te...er.exe
windows10-2004-x64
1Hot CPU Te...se.rtf
windows7-x64
4Hot CPU Te...se.rtf
windows10-2004-x64
1Hot CPU Te...��.exe
windows7-x64
1Hot CPU Te...��.exe
windows10-2004-x64
1Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13/05/2024, 10:56
Static task
static1
Behavioral task
behavioral1
Sample
Hot CPU Tester Pro/bench.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Hot CPU Tester Pro/bench.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Hot CPU Tester Pro/changes.rtf
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Hot CPU Tester Pro/changes.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Hot CPU Tester Pro/hot cpu tester.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Hot CPU Tester Pro/hot cpu tester.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Hot CPU Tester Pro/license.rtf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Hot CPU Tester Pro/license.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Hot CPU Tester Pro/soft2cn.com汉化说明.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
Hot CPU Tester Pro/soft2cn.com汉化说明.exe
Resource
win10v2004-20240508-en
General
-
Target
Hot CPU Tester Pro/bench.dll
-
Size
124KB
-
MD5
926a8ed1a202b663e58bb982c193a066
-
SHA1
420842ca9b06e521785eff928f4812319b2b2f52
-
SHA256
31bca71cde563b8ad4b30768295bf6d9f1091222d462899eb4bf911b0c71b294
-
SHA512
4385b9261eedc8eccb2ef934b9aee5ac3b8e21e599956f944b5564a6d7665ba12c0f20f652e84d0eb9cc95113f90b09b3f14f34d83c9397f6614a419b13bb0cc
-
SSDEEP
1536:4hQmACLchE1wfkdpuPiT7BAY/bBL8A33+p2L2wBhTH6QukTVD6crkLdy0:UQm/EExdbn/b2AnjuX6VD6KkLdJ
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2760 wrote to memory of 5056 2760 rundll32.exe 81 PID 2760 wrote to memory of 5056 2760 rundll32.exe 81 PID 2760 wrote to memory of 5056 2760 rundll32.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Hot CPU Tester Pro\bench.dll",#11⤵
- Suspicious use of WriteProcessMemory
PID:2760 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Hot CPU Tester Pro\bench.dll",#12⤵PID:5056
-