Overview
overview
3Static
static
3mig/dist/M...64.dll
windows7-x64
1mig/dist/M...64.dll
windows10-2004-x64
1mig/dist/M...64.dll
windows7-x64
1mig/dist/M...64.dll
windows10-2004-x64
1mig/dist/M...-3.dll
windows7-x64
1mig/dist/M...-3.dll
windows10-2004-x64
1mig/dist/M...-8.dll
windows7-x64
1mig/dist/M...-8.dll
windows10-2004-x64
1mig/dist/M...-3.dll
windows7-x64
1mig/dist/M...-3.dll
windows10-2004-x64
1mig/dist/M...at.dll
windows7-x64
1mig/dist/M...at.dll
windows10-2004-x64
1mig/dist/M...12.dll
windows7-x64
1mig/dist/M...12.dll
windows10-2004-x64
1mig/dist/M...ct.dll
windows7-x64
1mig/dist/M...ct.dll
windows10-2004-x64
1mig/dist/M...to.vbs
windows7-x64
1mig/dist/M...to.vbs
windows10-2004-x64
1mig/dist/M...ck.vbs
windows7-x64
1mig/dist/M...ck.vbs
windows10-2004-x64
1mig/dist/M...tp.ps1
windows7-x64
3mig/dist/M...tp.ps1
windows10-2004-x64
3mig/dist/M...it.vbs
windows7-x64
1mig/dist/M...it.vbs
windows10-2004-x64
1mig/dist/M...ox.vbs
windows7-x64
1mig/dist/M...ox.vbs
windows10-2004-x64
1mig/dist/M...et.vbs
windows7-x64
1mig/dist/M...et.vbs
windows10-2004-x64
1mig/dist/M...nu.vbs
windows7-x64
1mig/dist/M...nu.vbs
windows10-2004-x64
1mig/dist/M...nc.ps1
windows7-x64
3mig/dist/M...nc.ps1
windows10-2004-x64
3Analysis
-
max time kernel
117s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
19-06-2024 11:15
Behavioral task
behavioral1
Sample
mig/dist/Minecraft code gen/_internal/charset_normalizer/md.cp312-win_amd64.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
mig/dist/Minecraft code gen/_internal/charset_normalizer/md.cp312-win_amd64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
mig/dist/Minecraft code gen/_internal/charset_normalizer/md__mypyc.cp312-win_amd64.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
mig/dist/Minecraft code gen/_internal/charset_normalizer/md__mypyc.cp312-win_amd64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
mig/dist/Minecraft code gen/_internal/libcrypto-3.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
mig/dist/Minecraft code gen/_internal/libcrypto-3.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
mig/dist/Minecraft code gen/_internal/libffi-8.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
mig/dist/Minecraft code gen/_internal/libffi-8.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
mig/dist/Minecraft code gen/_internal/libssl-3.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
mig/dist/Minecraft code gen/_internal/libssl-3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
mig/dist/Minecraft code gen/_internal/pyexpat.dll
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
mig/dist/Minecraft code gen/_internal/pyexpat.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
mig/dist/Minecraft code gen/_internal/python312.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
mig/dist/Minecraft code gen/_internal/python312.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
mig/dist/Minecraft code gen/_internal/select.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
mig/dist/Minecraft code gen/_internal/select.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
mig/dist/Minecraft code gen/_internal/tcl/auto.vbs
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
mig/dist/Minecraft code gen/_internal/tcl/auto.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
mig/dist/Minecraft code gen/_internal/tcl/clock.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
mig/dist/Minecraft code gen/_internal/tcl/clock.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
mig/dist/Minecraft code gen/_internal/tcl/http1.0/http.ps1
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
mig/dist/Minecraft code gen/_internal/tcl/http1.0/http.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
mig/dist/Minecraft code gen/_internal/tcl/init.vbs
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
mig/dist/Minecraft code gen/_internal/tcl/init.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
mig/dist/Minecraft code gen/_internal/tk/listbox.vbs
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
mig/dist/Minecraft code gen/_internal/tk/listbox.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
mig/dist/Minecraft code gen/_internal/tk/megawidget.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
mig/dist/Minecraft code gen/_internal/tk/megawidget.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
mig/dist/Minecraft code gen/_internal/tk/menu.vbs
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
mig/dist/Minecraft code gen/_internal/tk/menu.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
mig/dist/Minecraft code gen/_internal/tk/mkpsenc.ps1
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
mig/dist/Minecraft code gen/_internal/tk/mkpsenc.ps1
Resource
win10v2004-20240226-en
General
-
Target
mig/dist/Minecraft code gen/_internal/libffi-8.dll
-
Size
38KB
-
MD5
0f8e4992ca92baaf54cc0b43aaccce21
-
SHA1
c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
-
SHA256
eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
-
SHA512
6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
-
SSDEEP
768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 1900 wrote to memory of 2940 1900 rundll32.exe WerFault.exe PID 1900 wrote to memory of 2940 1900 rundll32.exe WerFault.exe PID 1900 wrote to memory of 2940 1900 rundll32.exe WerFault.exe