Overview
overview
7Static
static
3Marfrig/CP...64.exe
windows7-x64
6Marfrig/CP...64.exe
windows10-2004-x64
4Marfrig/CP...86.exe
windows7-x64
4Marfrig/CP...86.exe
windows10-2004-x64
4Marfrig/CP...09.dll
windows7-x64
1Marfrig/CP...09.dll
windows10-2004-x64
1Marfrig/CP...nm.sys
windows7-x64
1Marfrig/CP...nm.sys
windows10-2004-x64
1Marfrig/CP...er.sys
windows7-x64
1Marfrig/CP...er.sys
windows10-2004-x64
1Marfrig/CP...09.dll
windows7-x64
1Marfrig/CP...09.dll
windows10-2004-x64
1Marfrig/CP...nm.sys
windows7-x64
1Marfrig/CP...nm.sys
windows10-2004-x64
1Marfrig/CP...er.sys
windows7-x64
1Marfrig/CP...er.sys
windows10-2004-x64
1Marfrig/Ce...ay.jar
windows7-x64
1Marfrig/Ce...ay.jar
windows10-2004-x64
7Marfrig/putty.exe
windows7-x64
1Marfrig/putty.exe
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
08-07-2024 17:47
Static task
static1
Behavioral task
behavioral1
Sample
Marfrig/CP210x_VCP_Windows/CP210xVCPInstaller_x64.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Marfrig/CP210x_VCP_Windows/CP210xVCPInstaller_x64.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
Marfrig/CP210x_VCP_Windows/CP210xVCPInstaller_x86.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Marfrig/CP210x_VCP_Windows/CP210xVCPInstaller_x86.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
Marfrig/CP210x_VCP_Windows/x64/WdfCoInstaller01009.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Marfrig/CP210x_VCP_Windows/x64/WdfCoInstaller01009.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
Marfrig/CP210x_VCP_Windows/x64/silabenm.sys
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Marfrig/CP210x_VCP_Windows/x64/silabenm.sys
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
Marfrig/CP210x_VCP_Windows/x64/silabser.sys
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Marfrig/CP210x_VCP_Windows/x64/silabser.sys
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
Marfrig/CP210x_VCP_Windows/x86/WdfCoInstaller01009.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Marfrig/CP210x_VCP_Windows/x86/WdfCoInstaller01009.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
Marfrig/CP210x_VCP_Windows/x86/silabenm.sys
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Marfrig/CP210x_VCP_Windows/x86/silabenm.sys
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
Marfrig/CP210x_VCP_Windows/x86/silabser.sys
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Marfrig/CP210x_VCP_Windows/x86/silabser.sys
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
Marfrig/Centaurus_V2-55-0_ParshallDisplay.jar
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Marfrig/Centaurus_V2-55-0_ParshallDisplay.jar
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
Marfrig/putty.exe
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Marfrig/putty.exe
Resource
win10v2004-20240704-en
General
-
Target
Marfrig/putty.exe
-
Size
1.2MB
-
MD5
b3bb91ad96f2d4c041861ce59ba6ac73
-
SHA1
e18c6fd6a0d0d5c124c9ef6972a76c47c28c80a3
-
SHA256
0581160998be30f79bd9a0925a01b0ebc4cb94265dfa7f8da1e2839bf0f1e426
-
SHA512
e3a8426d202a8aad79aad5d75549753cf70b9c2c0fa4c9468f03d089eca8e529b56cd8fa16b7be3a4cfc019d43ff458b9dc8a1cae44b6ed75e27f21489a2cbdd
-
SSDEEP
24576:+wIEES7sjMc3EQVdEDvLJPjraFLR5ROwwC:+rE/7MMc3Xajrkp/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2976 putty.exe