Overview
overview
10Static
static
10133359336e...96.exe
windows10-2004-x64
7system.pyc
windows10-2004-x64
315b2fa0131...aa.zip
windows10-2004-x64
1IMHttpComm.dll
windows10-2004-x64
3ImLookExU.dll
windows10-2004-x64
1ImLookU.dll
windows10-2004-x64
3ImNtUtilU.dll
windows10-2004-x64
3ImPackr.exe
windows10-2004-x64
7ImUtilsU.dll
windows10-2004-x64
3ImWrappU.dll
windows10-2004-x64
1Microsoft....nifest
windows10-2004-x64
3Microsoft....nifest
windows10-2004-x64
3SftTree_IX86_U_60.dll
windows10-2004-x64
1chamiso.sql
windows10-2004-x64
3mfc80u.dll
windows10-2004-x64
1msvcp80.dll
windows10-2004-x64
1msvcr80.dll
windows10-2004-x64
1torpor.zip
windows10-2004-x64
1wlessfp1.dll
windows10-2004-x64
31dcf0f609f...f9.exe
windows10-2004-x64
5b76a896c8f...f7.exe
windows10-2004-x64
1Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27-06-2024 08:29
Behavioral task
behavioral1
Sample
133359336ed60b94e9cd500fb518a72fe8711c4a8f8fc83ef2cc242173d8cb96.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
system.pyc
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
15b2fa0131427a7fbffe42ce83f36357661772faa0381e6ab8ef21a81c6380aa.zip
Resource
win10v2004-20240611-en
Behavioral task
behavioral4
Sample
IMHttpComm.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
ImLookExU.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral6
Sample
ImLookU.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
ImNtUtilU.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral8
Sample
ImPackr.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
ImUtilsU.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral10
Sample
ImWrappU.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
Microsoft.VC80.CRT.manifest
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
Microsoft.VC80.MFC.manifest
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
SftTree_IX86_U_60.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral14
Sample
chamiso.sql
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
mfc80u.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral16
Sample
msvcp80.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
msvcr80.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral18
Sample
torpor.zip
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
wlessfp1.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral20
Sample
1dcf0f609f8e6867fe4a7b49c97d5674fefe7a64fdb82de1fd819a3b96a8d8f9.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
b76a896c8faf8ca28e4f0ecce91e7a622c3ea8999f27503ac9f46e09542c26f7.exe
Resource
win10v2004-20240508-en
General
-
Target
mfc80u.dll
-
Size
1.0MB
-
MD5
ccc2e312486ae6b80970211da472268b
-
SHA1
025b52ff11627760f7006510e9a521b554230fee
-
SHA256
18be5d3c656236b7e3cd6d619d62496fe3e7f66bf2859e460f8ac3d1a6bdaa9a
-
SHA512
d6892abb1a85b9cf0fc6abe1c3aca6c46fc47541dffc2b75f311e8d2c9c1d367f265599456bd77be0e2b6d20c6c22ff5f0c46e7d9ba22c847ad1cbedc8ca3eff
-
SSDEEP
12288:o5lk6KUYmYRP6vAt9+J51r64f22JhPeEiz8F+p/xoOTa+S9XqNNw2ohW3:UyUaP64t9+JfrRJiz8F+p/N2/cmW
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 1256 wrote to memory of 4352 1256 rundll32.exe rundll32.exe PID 1256 wrote to memory of 4352 1256 rundll32.exe rundll32.exe PID 1256 wrote to memory of 4352 1256 rundll32.exe rundll32.exe