Analysis
- max time kernel
94s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
08/06/2024, 22:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe
Resource
win7-20240508-en
windows7-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe
- Size 1.8MB
- Sample240608-2epz3saa48
- SHA256 ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837
- MD5 85decdb087c7bf84c6d8d7e36b330f23
- SHA1 c7cc3b6751860fde0e97d2490b19b579d7d061b5
- SHA512 8f687f55276043848bfd042677de3d2e93766d11d256b1452047342a35c184d70d15adb58748736d6f012885648aa1c7f388e1dde2620d468ae0ffa777577799
- SSDEEP 49152:Jx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WApxlMPdlR8v4UC0Eg6ET7M/I:JvbjVkjjCAzJgl2/V0cETQ/I
- MD5 SHA1 SHA512 SSDEEP
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleUpdateComRegisterShell64.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_bn.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_de.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_nl.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_sk.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_hu.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ru.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_zh-CN.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\psuser_64.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ja.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_lv.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_sw.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_zh-TW.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\psmachine_64.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_hi.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_kn.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_no.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_pl.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_am.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_te.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleUpdate.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ca.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_cs.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_el.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_sr.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_sv.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_es-419.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_fr.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_is.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ml.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ro.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdate.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_gu.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ko.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_lt.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_th.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_iw.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File opened for modification C:\Program Files (x86)\Google\Temp\GUT498D.tmp ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\psuser.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleCrashHandler64.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_en-GB.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_fi.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleUpdateBroker.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleUpdateOnDemand.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_es.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_mr.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ms.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_vi.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_en.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_et.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_fa.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_hr.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_id.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_it.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ur.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File opened for modification C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleUpdateSetup.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleUpdateCore.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_ta.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleCrashHandler.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_pt-BR.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_pt-PT.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\GoogleUpdateSetup.exe ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_tr.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe File created C:\Program Files (x86)\Google\Temp\GUM498C.tmp\goopdateres_uk.dll ef31431e89e26f429b966aac684051e681eef842a8826d90c5ffc9e40a59f837.exe