Overview
overview
7Static
static
7rrrr/HWiNFO64.exe
windows11-21h2-x64
7rrrr/STRES...st.dll
windows11-21h2-x64
1rrrr/STRES...40.dll
windows11-21h2-x64
1rrrr/STRES...40.dll
windows11-21h2-x64
3rrrr/STRES...64.exe
windows11-21h2-x64
1rrrr/STRES...32.exe
windows11-21h2-x64
1rrrr/STRES...md.dll
windows11-21h2-x64
1rrrr/STRES...64.exe
windows11-21h2-x64
1rrrr/STRES...64.exe
windows11-21h2-x64
6rrrr/STRES...se.rtf
windows11-21h2-x64
1rrrr/STRES...ic.exe
windows11-21h2-x64
1rrrr/STRES...ro.exe
windows11-21h2-x64
1rrrr/STRES...CT.exe
windows11-21h2-x64
7rrrr/STRES...M5.exe
windows11-21h2-x64
3rrrr/STRES...T0.dll
windows11-21h2-x64
3rrrr/STRES...de.url
windows11-21h2-x64
1rrrr/STRES...se.url
windows11-21h2-x64
1rrrr/STRES...ms.url
windows11-21h2-x64
1rrrr/STRES...op.exe
windows11-21h2-x64
1rrrr/STRES...4P.exe
windows11-21h2-x64
1rrrr/STRES...mi.exe
windows11-21h2-x64
1rrrr/STRES...io.exe
windows11-21h2-x64
1rrrr/STRES...yu.exe
windows11-21h2-x64
1rrrr/STRES...na.exe
windows11-21h2-x64
1rrrr/STRES...ri.exe
windows11-21h2-x64
1rrrr/STRES...mi.exe
windows11-21h2-x64
1rrrr/STRES...ri.exe
windows11-21h2-x64
1rrrr/STRES...na.exe
windows11-21h2-x64
1rrrr/STRES...oa.exe
windows11-21h2-x64
1rrrr/STRES...bs.dll
windows11-21h2-x64
1rrrr/STRES...20.dll
windows11-21h2-x64
1rrrr/STRES...12.dll
windows11-21h2-x64
1Analysis
-
max time kernel
443s -
max time network
1174s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system -
submitted
23-05-2024 00:17
Behavioral task
behavioral1
Sample
rrrr/HWiNFO64.exe
Resource
win11-20240426-en
Behavioral task
behavioral2
Sample
rrrr/STRESS TEST/KarhuTestMem/x64/ramtest.dll
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
rrrr/STRESS TEST/KarhuTestMem/x64/vcomp140.dll
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
rrrr/STRESS TEST/KarhuTestMem/x86/vcomp140.dll
Resource
win11-20240426-en
Behavioral task
behavioral5
Sample
rrrr/STRESS TEST/LinpackXtreme-1.1.5/LinpackXtreme_x64.exe
Resource
win11-20240426-en
Behavioral task
behavioral6
Sample
rrrr/STRESS TEST/LinpackXtreme-1.1.5/binaries/x32/linpack_amd32.exe
Resource
win11-20240426-en
Behavioral task
behavioral7
Sample
rrrr/STRESS TEST/LinpackXtreme-1.1.5/binaries/x64/libiomp5md.dll
Resource
win11-20240426-en
Behavioral task
behavioral8
Sample
rrrr/STRESS TEST/LinpackXtreme-1.1.5/binaries/x64/linpack_intel64.exe
Resource
win11-20240419-en
Behavioral task
behavioral9
Sample
rrrr/STRESS TEST/LinpackXtreme-1.1.5/hwmonitor/HWMonitor_x64.exe
Resource
win11-20240508-en
Behavioral task
behavioral10
Sample
rrrr/STRESS TEST/LinpackXtreme-1.1.5/license.rtf
Resource
win11-20240426-en
Behavioral task
behavioral11
Sample
rrrr/STRESS TEST/MemTestPro 7/MTPclassic.exe
Resource
win11-20240426-en
Behavioral task
behavioral12
Sample
rrrr/STRESS TEST/MemTestPro 7/MemTestPro.exe
Resource
win11-20240508-en
Behavioral task
behavioral13
Sample
rrrr/STRESS TEST/OCCT.exe
Resource
win11-20240508-en
Behavioral task
behavioral14
Sample
rrrr/STRESS TEST/TestMem5 v0.12 (Many configs repackaged)/TM5.exe
Resource
win11-20240426-en
Behavioral task
behavioral15
Sample
rrrr/STRESS TEST/TestMem5 v0.12 (Many configs repackaged)/bin/MT0.dll
Resource
win11-20240508-en
Behavioral task
behavioral16
Sample
rrrr/STRESS TEST/ThrottleStop_9.6/Basic Throttlestop and Undervolting Guide.url
Resource
win11-20240508-en
Behavioral task
behavioral17
Sample
rrrr/STRESS TEST/ThrottleStop_9.6/The ThrottleStop Guide (2023)- How to Lower Temperatures, Increase.url
Resource
win11-20240426-en
Behavioral task
behavioral18
Sample
rrrr/STRESS TEST/ThrottleStop_9.6/ThrottleStop - TPU Forums.url
Resource
win11-20240508-en
Behavioral task
behavioral19
Sample
rrrr/STRESS TEST/ThrottleStop_9.6/ThrottleStop.exe
Resource
win11-20240508-en
Behavioral task
behavioral20
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/04-P4P.exe
Resource
win11-20240426-en
Behavioral task
behavioral21
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/05-A64 ~ Kasumi.exe
Resource
win11-20240426-en
Behavioral task
behavioral22
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/08-NHM ~ Ushio.exe
Resource
win11-20240419-en
Behavioral task
behavioral23
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/11-BD1 ~ Miyu.exe
Resource
win11-20240419-en
Behavioral task
behavioral24
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/11-SNB ~ Hina.exe
Resource
win11-20240426-en
Behavioral task
behavioral25
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/13-HSW ~ Airi.exe
Resource
win11-20240426-en
Behavioral task
behavioral26
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/14-BDW ~ Kurumi.exe
Resource
win11-20240426-en
Behavioral task
behavioral27
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/17-SKX ~ Kotori.exe
Resource
win11-20240426-en
Behavioral task
behavioral28
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/17-ZN1 ~ Yukina.exe
Resource
win11-20240426-en
Behavioral task
behavioral29
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/18-CNL ~ Shinoa.exe
Resource
win11-20240508-en
Behavioral task
behavioral30
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/IccLibs.dll
Resource
win11-20240508-en
Behavioral task
behavioral31
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/cilkrts20.dll
Resource
win11-20240426-en
Behavioral task
behavioral32
Sample
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/tbb12.dll
Resource
win11-20240508-en
General
-
Target
rrrr/STRESS TEST/Y-CRUNCHER/Binaries/11-BD1 ~ Miyu.exe
-
Size
5.9MB
-
MD5
4a1748a709846514af5efb760a7d9d39
-
SHA1
e001454d97ae2367429ea33741b032b72c409db6
-
SHA256
32d92df4b0df19689973375558d67d254538ab2c477baae5f40ac00b449a2967
-
SHA512
c415da639bbe521763eee62bbc44fcca2ec9902ec8cef6b8bc3899bcc53ef3e81fd3203dba522d97608cf11d6efa1700a40263a4ca8e5d96199e97e1e5188291
-
SSDEEP
49152:g9zCtHtksFuq4S7fpLgeo+gl3GpH4AKWK4C42Fml8o/L9fHflAWi75Skk7VAB:FVtk/l4Wmp96tk
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes:
11-BD1 ~ Miyu.exedescription pid process target process PID 3932 wrote to memory of 4840 3932 11-BD1 ~ Miyu.exe cmd.exe PID 3932 wrote to memory of 4840 3932 11-BD1 ~ Miyu.exe cmd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\rrrr\STRESS TEST\Y-CRUNCHER\Binaries\11-BD1 ~ Miyu.exe"C:\Users\Admin\AppData\Local\Temp\rrrr\STRESS TEST\Y-CRUNCHER\Binaries\11-BD1 ~ Miyu.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3932 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c pause2⤵PID:4840