Overview
overview
10Static
static
3AMIBCP5/AMIBCP5.exe
windows7-x64
1AMIBCP5/AMIBCP5.exe
windows10-2004-x64
1GUIfpt.exe
windows7-x64
10GUIfpt.exe
windows10-2004-x64
10UEFITool/UEFITool.exe
windows7-x64
1UEFITool/UEFITool.exe
windows10-2004-x64
1idrvdll32e.dll
windows7-x64
1idrvdll32e.dll
windows10-2004-x64
1mmtool/mmtool_a5.exe
windows7-x64
1mmtool/mmtool_a5.exe
windows10-2004-x64
1pmxdll32e.dll
windows7-x64
1pmxdll32e.dll
windows10-2004-x64
1Analysis
- max time kernel
92s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240704-en - resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system - submitted
09/07/2024, 00:03
Static task
static1
Behavioral task
behavioral1
Sample
AMIBCP5/AMIBCP5.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
AMIBCP5/AMIBCP5.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
GUIfpt.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
GUIfpt.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
UEFITool/UEFITool.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
UEFITool/UEFITool.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
idrvdll32e.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
idrvdll32e.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
mmtool/mmtool_a5.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
mmtool/mmtool_a5.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
pmxdll32e.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
pmxdll32e.dll
Resource
win10v2004-20240704-en
General
- Target AMIBCP5/AMIBCP5.exe
- Size 11.4MB
- Sample240709-acf6lswbpp
- SHA256 c7ade67fe0e8f4c22f73ce3168ff6e718086f1eda83cce4c065b4fe49bd5ad99
- MD5 c15e0801502a6ad896476e64b93d6924
- SHA1 31d6eed2bd461a5517d06ddcba8218f3b50af37e
- SHA512 9d6e408682b7fc66e3884288122516a111bfc706da6a9bab626266b3934f3f85d38dbbd747e2b90e79005114f2a063cdfad2e3d9d81f2777fb4e514f3e189976
- SSDEEP 196608:S/JOp6cMeBadwqRMYfjBpOiEVkX4fT1lGXN:SBOptbBafRD9p8kX4jGXN
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1160 AMIBCP5.exe 1160 AMIBCP5.exe