Overview

overview

5

Static

static

3

Hyper HWID...er.exe

windows7-x64

1

Hyper HWID...er.exe

windows10-2004-x64

5

Hyper HWID...yz.exe

windows7-x64

1

Hyper HWID...yz.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    130s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-05-2024 18:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Hyper HWID Spoofer/Hypermenu.xyz.exe

  • Size

    22KB

  • MD5

    8a01ba7478b27738627dc21007666c0c

  • SHA1

    8a30a8363b9df752b2355a52d1dd8471f29e80bd

  • SHA256

    d58f364262f470c7c81529b4bb49afff9176f9e280548e34e5da15fa8393e1f7

  • SHA512

    3fead3d541550ce1a15e18fa643a4661b06a3066789093a0b02bc78ac9f7bbc10326da6d9cb4eb692ec6c3671020ea3d9b52dca1324ce4171e79d9312dfe983c

  • SSDEEP

    192:AhzUOedDI04du6++tS4se5WC75pddjLfZRW2Mopagp6F8akp4rmj94trLiB+FnDp:uLedPfZh0jLfZRWfeLE8XstrLK2u

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Hyper HWID Spoofer\Hypermenu.xyz.exe
    "C:\Users\Admin\AppData\Local\Temp\Hyper HWID Spoofer\Hypermenu.xyz.exe"
    1⤵
      PID:624
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2348

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/624-0-0x0000023A8C4A0000-0x0000023A8C4AC000-memory.dmp

        Filesize

        48KB

        Download

      • memory/624-1-0x00007FF8C5923000-0x00007FF8C5925000-memory.dmp

        Filesize

        8KB

        Download