538625f9a7445060633674211aa9d30224a7dea65b72b7bbb16796483b09034a

Login
Reports

Overview

overview

Static

static

echo-Setup-1.2.2.exe

windows7-x64

echo-Setup-1.2.2.exe

windows10-2004-x64

$PLUGINSDI...er.dll

windows7-x64

$PLUGINSDI...er.dll

windows10-2004-x64

$PLUGINSDI...ls.dll

windows7-x64

$PLUGINSDI...ls.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows7-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...ll.dll

windows7-x64

$PLUGINSDI...ll.dll

windows10-2004-x64

$PLUGINSDIR/app-64.7z

windows7-x64

$PLUGINSDIR/app-64.7z

windows10-2004-x64

LICENSES.c...m.html

windows7-x64

LICENSES.c...m.html

windows10-2004-x64

d3dcompiler_47.dll

windows10-2004-x64

echo.exe

windows7-x64

echo.exe

windows10-2004-x64

ffmpeg.dll

windows7-x64

ffmpeg.dll

windows10-2004-x64

libEGL.dll

windows7-x64

libEGL.dll

windows10-2004-x64

libGLESv2.dll

windows7-x64

libGLESv2.dll

windows10-2004-x64

resources/...dex.js

windows7-x64

resources/...dex.js

windows10-2004-x64

resources/...rse.js

windows7-x64

resources/...rse.js

windows10-2004-x64

resources/...and.js

windows7-x64

resources/...and.js

windows10-2004-x64

resources/...lts.js

windows7-x64

resources/...lts.js

windows10-2004-x64

resources/...xec.js

windows7-x64

Analysis

max time kernel
120s
max time network
129s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
09/07/2024, 04:40

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

echo-Setup-1.2.2.exe

Resource

win7-20240705-en

windows7-x64

12 signatures

150 seconds

discovery

Behavioral task

behavioral2

Sample

echo-Setup-1.2.2.exe

Resource

win10v2004-20240704-en

windows10-2004-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral3

Sample

$PLUGINSDIR/SpiderBanner.dll

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/SpiderBanner.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win7-20240704-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240708-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WinShell.dll

Resource

win7-20240704-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/app-64.7z

Resource

win7-20240704-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/app-64.7z

Resource

win10v2004-20240704-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

LICENSES.chromium.html

Resource

win7-20240705-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

LICENSES.chromium.html

Resource

win10v2004-20240704-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral15

Sample

d3dcompiler_47.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

echo.exe

Resource

win7-20240705-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

echo.exe

Resource

win10v2004-20240704-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

ffmpeg.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

ffmpeg.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

libEGL.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

libEGL.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

libGLESv2.dll

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

libGLESv2.dll

Resource

win10v2004-20240704-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/cli/index.js

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/cli/index.js

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/cli/parse.js

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/cli/parse.js

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/config/command.js

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/config/command.js

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/config/defaults.js

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/config/defaults.js

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

resources/app.asar.unpacked/node_modules/nodemon/lib/config/exec.js

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

execution

Report Analysis Logs

General

Target
libGLESv2.dll
Size 7.6MB
Sample240709-fa2mesyfjh
SHA256 baf6f58949320f2aed9f2cf1adafcc95dc213c2c22b3eb92f0f02a2b1f0ebfc9
MD5 5cfc8302ddff464405d4c960d4a1b923
SHA1 8cc54eaf52c38b4f933da98a970b987bfdb15324
SHA512 cf3b54fe6e0105c12da0f019442a71c4eb7509c49f0e4c5674d08446d0503304aa6d15f683659adef30e78b9abfceebf811df931bc5911dc6bcabcaa3eb76b3b
SSDEEP 49152:5Du07+HIKKqyDBW1ua9A+flyhRKB2ACkI+dkLWzuzAB1qcSLqBD+3N96sGKgMQG/:5Tpj+f0O84eLwgXYCbvut1ffKsIm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 2308	2180	rundll32.exe	31
PID 2180 wrote to memory of 2308	2180	rundll32.exe	31
PID 2180 wrote to memory of 2308	2180	rundll32.exe	31

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2180 -s 88
  2⤵
  PID:2308

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads