Overview
overview
10Static
static
3Stake-Casi....3.zip
windows7-x64
1Stake-Casi....3.zip
windows10-2004-x64
1Stake-Casi...er.vbs
windows7-x64
1Stake-Casi...er.vbs
windows10-2004-x64
1Stake-Casi...er.exe
windows7-x64
1Stake-Casi...er.exe
windows10-2004-x64
1Stake-Casi...or.exe
windows7-x64
1Stake-Casi...or.exe
windows10-2004-x64
10Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
27/05/2024, 22:30
Static task
static1
Behavioral task
behavioral1
Sample
Stake-Casino-predictorV5.3.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Stake-Casino-predictorV5.3.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Stake-Casino-predictorV5.3/Data/driver.vbs
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Stake-Casino-predictorV5.3/Data/driver.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Stake-Casino-predictorV5.3/Data/render.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Stake-Casino-predictorV5.3/Data/render.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Stake-Casino-predictorV5.3/Stake-Casino-predictor.exe
Resource
win7-20240221-en
General
- Target Stake-Casino-predictorV5.3/Stake-Casino-predictor.exe
- Size 54KB
- Sample240527-2e8gesde43
- SHA256 07f16c8bb008d15f80f4fef741996919ac162de9cc812d241d9d9c3d9b067acd
- MD5 4f73159bd26afdc777d1b1da422bc12a
- SHA1 f364d97a10464184d2e5916f27047888b9515ea1
- SHA512 b968627bdfbf29f07049030373322952a4b9e4ce9b1b15bb0cd2b5513582e07388c8b3f07c8032b89d5aee436d5e1a948706753f83218c7184a699dacd6c60cc
- SSDEEP 768:GQbC0Dhax7s4p5Yy4DN9UusKjQbXBgscI6BWMQtYcF2l1x6KPFn6f4KE:hbCdCJ9UxKjkxgscI6EM821xlPFn6AKE
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2264 wrote to memory of 1944 2264 Stake-Casino-predictor.exe 29 PID 2264 wrote to memory of 1944 2264 Stake-Casino-predictor.exe 29 PID 2264 wrote to memory of 1944 2264 Stake-Casino-predictor.exe 29
Processes
-
C:\Users\Admin\AppData\Local\Temp\Stake-Casino-predictorV5.3\Stake-Casino-predictor.exe"C:\Users\Admin\AppData\Local\Temp\Stake-Casino-predictorV5.3\Stake-Casino-predictor.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2264 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2264 -s 5202⤵PID:1944
-