Overview
overview
3Static
static
3Spoofer/AM...64.exe
windows7-x64
1Spoofer/AM...64.exe
windows10-2004-x64
1Spoofer/D3...r3.dll
windows10-2004-x64
3Spoofer/Pe...r3.dll
windows7-x64
1Spoofer/Pe...r3.dll
windows10-2004-x64
1Spoofer/Pr...r3.dll
windows7-x64
1Spoofer/Pr...r3.dll
windows10-2004-x64
3Spoofer/Spoofer.exe
windows7-x64
1Spoofer/Spoofer.exe
windows10-2004-x64
1Spoofer/Volumeid.exe
windows7-x64
1Spoofer/Volumeid.exe
windows10-2004-x64
1Spoofer/am...64.sys
windows10-2004-x64
1Spoofer/vc...r3.dll
windows7-x64
3Spoofer/vc...r3.dll
windows10-2004-x64
3Spoofer/wp...r3.dll
windows7-x64
1Spoofer/wp...r3.dll
windows10-2004-x64
1Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 22:28
Static task
static1
Behavioral task
behavioral1
Sample
Spoofer/AMIDEWINx64.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Spoofer/AMIDEWINx64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Spoofer/D3DCompiler_47_cor3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
Spoofer/PenImc_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
Spoofer/PenImc_cor3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral6
Sample
Spoofer/PresentationNative_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral7
Sample
Spoofer/PresentationNative_cor3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
Spoofer/Spoofer.exe
Resource
win7-20240215-en
Behavioral task
behavioral9
Sample
Spoofer/Spoofer.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral10
Sample
Spoofer/Volumeid.exe
Resource
win7-20231129-en
Behavioral task
behavioral11
Sample
Spoofer/Volumeid.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
Spoofer/amigendrv64.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Spoofer/vcruntime140_cor3.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
Spoofer/vcruntime140_cor3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Spoofer/wpfgfx_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Spoofer/wpfgfx_cor3.dll
Resource
win10v2004-20240226-en
General
-
Target
Spoofer/AMIDEWINx64.exe
-
Size
379KB
-
MD5
6bfe0519e242720f965bb1680356728c
-
SHA1
f6a5392214ade1750af15fdcaa6f05bf8ee06f9e
-
SHA256
a922b1906f9b04b582e8ace9a17e6b6d405df15f4ab30bdc55f2fc5df7a5c9c3
-
SHA512
cf47a256fd970d1de50645c23fc68a18cec6873475e06d567d7ef065ea913d8ac98cc5e811113ff5c161786544898d03d375f683b1e31551e9dd41ac036433af
-
SSDEEP
6144:m0l5U6eUbNRNrOHh84pi8Y8ubTIlceF4knL7AL8tdwndOLv23+cr9JUwlJh:tyU5zOHy4pi8Y8ubTIlceF4knL7Ambv+
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 1 IoCs
Processes:
pid process 476