c06b7bae0279b2f76f50724c18f6744d4190bbd1f51de28ec865ea19e57bbebc | Triage

Submit
Reports

Overview

overview

7

Static

static

3

Marfrig/CP...64.exe

windows7-x64

6

Marfrig/CP...64.exe

windows10-2004-x64

4

Marfrig/CP...86.exe

windows7-x64

4

Marfrig/CP...86.exe

windows10-2004-x64

4

Marfrig/CP...09.dll

windows7-x64

1

Marfrig/CP...09.dll

windows10-2004-x64

1

Marfrig/CP...nm.sys

windows7-x64

1

Marfrig/CP...nm.sys

windows10-2004-x64

1

Marfrig/CP...er.sys

windows7-x64

1

Marfrig/CP...er.sys

windows10-2004-x64

1

Marfrig/CP...09.dll

windows7-x64

1

Marfrig/CP...09.dll

windows10-2004-x64

1

Marfrig/CP...nm.sys

windows7-x64

1

Marfrig/CP...nm.sys

windows10-2004-x64

1

Marfrig/CP...er.sys

windows7-x64

1

Marfrig/CP...er.sys

windows10-2004-x64

1

Marfrig/Ce...ay.jar

windows7-x64

1

Marfrig/Ce...ay.jar

windows10-2004-x64

7

Marfrig/putty.exe

windows7-x64

1

Marfrig/putty.exe

windows10-2004-x64

1

Analysis

max time kernel
124s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08-07-2024 17:47

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Marfrig/CP210x_VCP_Windows/CP210xVCPInstaller_x64.exe

Resource

win7-20240508-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Marfrig/CP210x_VCP_Windows/CP210xVCPInstaller_x64.exe

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Marfrig/CP210x_VCP_Windows/CP210xVCPInstaller_x86.exe

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Marfrig/CP210x_VCP_Windows/CP210xVCPInstaller_x86.exe

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Marfrig/CP210x_VCP_Windows/x64/WdfCoInstaller01009.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Marfrig/CP210x_VCP_Windows/x64/WdfCoInstaller01009.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Marfrig/CP210x_VCP_Windows/x64/silabenm.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Marfrig/CP210x_VCP_Windows/x64/silabenm.sys

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Marfrig/CP210x_VCP_Windows/x64/silabser.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Marfrig/CP210x_VCP_Windows/x64/silabser.sys

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Marfrig/CP210x_VCP_Windows/x86/WdfCoInstaller01009.dll

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Marfrig/CP210x_VCP_Windows/x86/WdfCoInstaller01009.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Marfrig/CP210x_VCP_Windows/x86/silabenm.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Marfrig/CP210x_VCP_Windows/x86/silabenm.sys

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Marfrig/CP210x_VCP_Windows/x86/silabser.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Marfrig/CP210x_VCP_Windows/x86/silabser.sys

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Marfrig/Centaurus_V2-55-0_ParshallDisplay.jar

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Marfrig/Centaurus_V2-55-0_ParshallDisplay.jar

Resource

win10v2004-20240704-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral19

Sample

Marfrig/putty.exe

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Marfrig/putty.exe

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Marfrig/CP210x_VCP_Windows/x64/silabenm.sys
Size

26KB
MD5

7799106fee728b907a86d9c9751e02d5
SHA1

f35320e535159d43b598c7c11684db05be4196a6
SHA256

ee85e8d3cf3819db28221bfc103de8df0e14e1878cecf54e8cd8c161b0e0af3c
SHA512

f91af958adf1b808fc6c30aa7fe9c6cf8c5c2a041327693403d9a12a06e7c5084d203433ba2d0917a3fc1a064626bce89526c5fb4b951f0a4aa07e84d237a99c
SSDEEP

384:n6oIhnyUR2OZRy0m1KOd/V3nL7fVRQlQeddvuVyxxTWBU/TJ1mTbCemE:fIZygU31Kw/V3L7f4esv2+/TbobCM

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Marfrig\CP210x_VCP_Windows\x64\silabenm.sys
1⤵
PID:1672
- C:\Users\Admin\AppData\Local\Temp\Marfrig\CP210x_VCP_Windows\x64\silabenm.sys
  C:\Users\Admin\AppData\Local\Temp\Marfrig\CP210x_VCP_Windows\x64\silabenm.sys
  2⤵
  PID:4504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4284,i,1468394940417093286,13535766203427582426,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:8
1⤵
PID:5028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4504-0-0x0000000000010000-0x000000000001C000-memory.dmp

Filesize
48KB

Download

© 2018-2024

Terms | Privacy