Overview
overview
10Static
static
10AnthemiaTemplate.zip
windows7-x64
1AnthemiaTemplate.zip
windows10-2004-x64
1AnthemiaTe...I2.dll
windows7-x64
1AnthemiaTe...I2.dll
windows10-2004-x64
1AnthemiaTe...on.dll
windows7-x64
1AnthemiaTe...on.dll
windows10-2004-x64
1AnthemiaTe...or.dll
windows7-x64
1AnthemiaTe...or.dll
windows10-2004-x64
1AnthemiaTe...LK.dll
windows7-x64
1AnthemiaTe...LK.dll
windows10-2004-x64
1AnthemiaTe...ct.exe
windows7-x64
10AnthemiaTe...ct.exe
windows10-2004-x64
10AnthemiaTe...mi.exe
windows7-x64
1AnthemiaTe...mi.exe
windows10-2004-x64
1AnthemiaTe...m1.vbs
windows7-x64
1AnthemiaTe...m1.vbs
windows10-2004-x64
1AnthemiaTe...er.vbs
windows7-x64
1AnthemiaTe...er.vbs
windows10-2004-x64
1AnthemiaTe...es.vbs
windows7-x64
1AnthemiaTe...es.vbs
windows10-2004-x64
1AnthemiaTe...I2.dll
windows7-x64
1AnthemiaTe...I2.dll
windows10-2004-x64
1AnthemiaTe...on.dll
windows7-x64
1AnthemiaTe...on.dll
windows10-2004-x64
1AnthemiaTe...ct.exe
windows7-x64
10AnthemiaTe...ct.exe
windows10-2004-x64
10AnthemiaTe...ct.exe
windows7-x64
3AnthemiaTe...ct.exe
windows10-2004-x64
3AnthemiaTe...I2.dll
windows7-x64
1AnthemiaTe...I2.dll
windows10-2004-x64
1AnthemiaTe...I2.dll
windows7-x64
1AnthemiaTe...I2.dll
windows10-2004-x64
1Analysis
- max time kernel
105s - max time network
219s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
29/05/2024, 10:17
Behavioral task
behavioral1
Sample
AnthemiaTemplate.zip
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
AnthemiaTemplate.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/Guna.UI2.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/Guna.UI2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/Newtonsoft.Json.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/Newtonsoft.Json.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/SharpMonoInjector.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/SharpMonoInjector.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/StealForOLK.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/StealForOLK.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/monosharp-auto inject.exe
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/monosharp-auto inject.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/smi.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
AnthemiaTemplate/AnthemiaTemplate/bin/Debug/smi.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Form1.vbs
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Form1.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Properties/Resources.Designer.vbs
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Properties/Resources.Designer.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Properties/Resources.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Properties/Resources.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/Guna.UI2.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/Guna.UI2.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/Newtonsoft.Json.dll
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/Newtonsoft.Json.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/monosharp-auto inject.exe
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/monosharp-auto inject.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/obj/Debug/monosharp-auto inject.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/obj/Debug/monosharp-auto inject.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
AnthemiaTemplate/MonoSharpAuto Inject/packages/Guna.UI2.WinForms.2.0.4.4/lib/net40/Guna.UI2.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
AnthemiaTemplate/MonoSharpAuto Inject/packages/Guna.UI2.WinForms.2.0.4.4/lib/net40/Guna.UI2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
AnthemiaTemplate/MonoSharpAuto Inject/packages/Guna.UI2.WinForms.2.0.4.4/lib/net45/Guna.UI2.dll
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
AnthemiaTemplate/MonoSharpAuto Inject/packages/Guna.UI2.WinForms.2.0.4.4/lib/net45/Guna.UI2.dll
Resource
win10v2004-20240426-en
General
- Target AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/obj/Debug/monosharp-auto inject.exe
- Size 18KB
- Sample240529-mbp4caca52
- SHA256 bf45d43703c3106f27cf9fbd890982e4e2c9e2dce78462c79401a7cd8b0c9520
- MD5 72d76f2388cc93a2b445fc050f6ea249
- SHA1 23f0a7f5692cae17044de67e910901ba23e56412
- SHA512 6e2f298d8d96880453c07658a6f57dbca56f11fcbd5f9783b6306a19360caf2c25bd08fe060e1f920c8cbe548d2981bbb054af30027c48ee558b299b24ab31d2
- SSDEEP 384:BxnMJgL2hEgXcBZ4XeVTQ5drRW3c2YlLiu08nMDX9uC0LXlcJs42Z+BOVBfcbu:WQl40utK2QOEu
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3612 4656 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\AnthemiaTemplate\MonoSharpAuto Inject\monosharp-auto inject\obj\Debug\monosharp-auto inject.exe"C:\Users\Admin\AppData\Local\Temp\AnthemiaTemplate\MonoSharpAuto Inject\monosharp-auto inject\obj\Debug\monosharp-auto inject.exe"1⤵PID:4656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4656 -s 10642⤵
- Program crash
PID:3612
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4656 -ip 46561⤵PID:4980