Overview
overview
7Static
static
7Calculator...it.exe
windows7-x64
7Calculator...it.exe
windows10-2004-x64
7Calculator...ps.exe
windows7-x64
1Calculator...ps.exe
windows10-2004-x64
1Calculator...ps.exe
windows7-x64
1Calculator...ps.exe
windows10-2004-x64
1Calculator...or.exe
windows7-x64
7Calculator...or.exe
windows10-2004-x64
7Calculator...lc.exe
windows7-x64
1Calculator...lc.exe
windows10-2004-x64
1Calculator...lc.exe
windows7-x64
7Calculator...lc.exe
windows10-2004-x64
7Calculator...LC.exe
windows7-x64
7Calculator...LC.exe
windows10-2004-x64
7Calculator...at.exe
windows7-x64
7Calculator...at.exe
windows10-2004-x64
7Calculator...ss.dll
windows7-x64
1Calculator...ss.dll
windows10-2004-x64
1Calculator...LC.exe
windows7-x64
7Calculator...LC.exe
windows10-2004-x64
7Becker4digit.exe
windows7-x64
7Becker4digit.exe
windows10-2004-x64
7Calculator...ar.exe
windows7-x64
1Calculator...ar.exe
windows10-2004-x64
1Calculator...ts.exe
windows7-x64
1Calculator...ts.exe
windows10-2004-x64
1Calculator...ts.exe
windows7-x64
1Calculator...ts.exe
windows10-2004-x64
1Calculator...it.exe
windows7-x64
7Calculator...it.exe
windows10-2004-x64
7Calculator...EN.exe
windows7-x64
1Calculator...EN.exe
windows10-2004-x64
1Analysis
-
max time kernel
164s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
16-05-2024 16:24
Behavioral task
behavioral1
Sample
Calculators/4DIGIT BECKER CALCULATOR/Becker4digit.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Calculators/4DIGIT BECKER CALCULATOR/Becker4digit.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Calculators/Aphilips.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Calculators/Aphilips.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Calculators/Aphilips/Aphilips.exe
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
Calculators/Aphilips/Aphilips.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Calculators/Audi-VW Calculator.exe
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
Calculators/Audi-VW Calculator.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Calculators/BP Fiat_Alfa_Peug Calc.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Calculators/BP Fiat_Alfa_Peug Calc.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Calculators/BP calc.exe
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
Calculators/BP calc.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Calculators/BPCALC.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
Calculators/BPCALC.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Calculators/BP_PgAlfaFiat.exe
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
Calculators/BP_PgAlfaFiat.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Calculators/BPcalc by aleksandaralex/BPcalc by aleksandaralex/ArmAccess.dll
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Calculators/BPcalc by aleksandaralex/BPcalc by aleksandaralex/ArmAccess.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Calculators/BPcalc by aleksandaralex/BPcalc by aleksandaralex/BPCALC.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Calculators/BPcalc by aleksandaralex/BPcalc by aleksandaralex/BPCALC.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Becker4digit.exe
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
Becker4digit.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Calculators/Becker Calculators/Becker_by_Elcar.exe
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
Calculators/Becker Calculators/Becker_by_Elcar.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
Calculators/Becker Calculators/Becker_calc_B9_5_digits.exe
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
Calculators/Becker Calculators/Becker_calc_B9_5_digits.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
Calculators/Becker calc B9 5 digits.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Calculators/Becker calc B9 5 digits.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
Calculators/Becker4digit.exe
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
Calculators/Becker4digit.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Calculators/CALCULATOR/CALCGEN.exe
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
Calculators/CALCULATOR/CALCGEN.exe
Resource
win10v2004-20240508-en
General
-
Target
Calculators/BP calc.exe
-
Size
153KB
-
MD5
e60f4f5eb7f8a1d3438540b86395fe55
-
SHA1
91748c01dfec80c00943570f517a06a861c9dd50
-
SHA256
5f2fecaccc310fde86bd285c6f28011b90d693ee9f063ca8d52e9e56938d6fd8
-
SHA512
00f872606198ccad140dc686898aabbb2426470600ccb560747ff8f9cca6e8813f9a80850b22873301f2c126367991f2fdfc13951a13ddb43e4c63405ebde253
-
SSDEEP
3072:rnGRRc6VaRA/LPOJBd8nbHwA1nZ+JAMPOA9w6rH6lZZYxkCB/2:aFVaRSOTd8DwmnZ+Jt9GZ43B
Malware Config
Signatures
-
resource yara_rule behavioral12/memory/948-0-0x0000000000400000-0x0000000000468000-memory.dmp upx behavioral12/memory/948-1-0x0000000000400000-0x0000000000468000-memory.dmp upx behavioral12/memory/948-3-0x0000000000400000-0x0000000000468000-memory.dmp upx behavioral12/memory/948-4-0x0000000000400000-0x0000000000468000-memory.dmp upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\Calculators\BP calc.exe"C:\Users\Admin\AppData\Local\Temp\Calculators\BP calc.exe"1⤵PID:948
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1400 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:81⤵PID:3036