Overview
overview
10Static
static
10Desty.zip
windows11-21h2-x64
1CefSharp.B...re.dll
windows11-21h2-x64
3CefSharp.B...ss.exe
windows11-21h2-x64
1CefSharp.C...me.dll
windows11-21h2-x64
3CefSharp.Core.dll
windows11-21h2-x64
1CefSharp.Wpf.dll
windows11-21h2-x64
1CefSharp.dll
windows11-21h2-x64
1Client.exe
windows11-21h2-x64
10DestyApi.json
windows11-21h2-x64
3DestyInstaller.exe
windows11-21h2-x64
7Creal.pyc
windows11-21h2-x64
3Readme.txt
windows11-21h2-x64
3Updater.exe
windows11-21h2-x64
chrome_100...nt.pak
windows11-21h2-x64
3chrome_200...nt.pak
windows11-21h2-x64
3chrome_elf.dll
windows11-21h2-x64
1d3dcompiler_47.dll
windows11-21h2-x64
3debug.log
windows11-21h2-x64
3icudtl.dat
windows11-21h2-x64
3libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1libcef.dll
windows11-21h2-x64
1resources.pak
windows11-21h2-x64
3v8_context...ot.bin
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
3Analysis
-
max time kernel
1328s -
max time network
1157s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system -
submitted
10-07-2024 15:40
Behavioral task
behavioral1
Sample
Desty.zip
Resource
win11-20240709-en
Behavioral task
behavioral2
Sample
CefSharp.BrowserSubprocess.Core.dll
Resource
win11-20240709-en
Behavioral task
behavioral3
Sample
CefSharp.BrowserSubprocess.exe
Resource
win11-20240709-en
Behavioral task
behavioral4
Sample
CefSharp.Core.Runtime.dll
Resource
win11-20240709-en
Behavioral task
behavioral5
Sample
CefSharp.Core.dll
Resource
win11-20240709-en
Behavioral task
behavioral6
Sample
CefSharp.Wpf.dll
Resource
win11-20240709-en
Behavioral task
behavioral7
Sample
CefSharp.dll
Resource
win11-20240709-en
Behavioral task
behavioral8
Sample
Client.exe
Resource
win11-20240709-en
Behavioral task
behavioral9
Sample
DestyApi.json
Resource
win11-20240709-en
Behavioral task
behavioral10
Sample
DestyInstaller.exe
Resource
win11-20240709-en
Behavioral task
behavioral11
Sample
Creal.pyc
Resource
win11-20240709-en
Behavioral task
behavioral12
Sample
Readme.txt
Resource
win11-20240709-en
Behavioral task
behavioral13
Sample
Updater.exe
Resource
win11-20240709-en
Behavioral task
behavioral14
Sample
chrome_100_percent.pak
Resource
win11-20240709-en
Behavioral task
behavioral15
Sample
chrome_200_percent.pak
Resource
win11-20240709-en
Behavioral task
behavioral16
Sample
chrome_elf.dll
Resource
win11-20240709-en
Behavioral task
behavioral17
Sample
d3dcompiler_47.dll
Resource
win11-20240709-en
Behavioral task
behavioral18
Sample
debug.log
Resource
win11-20240709-en
Behavioral task
behavioral19
Sample
icudtl.dat
Resource
win11-20240709-en
Behavioral task
behavioral20
Sample
libEGL.dll
Resource
win11-20240709-en
Behavioral task
behavioral21
Sample
libGLESv2.dll
Resource
win11-20240709-en
Behavioral task
behavioral22
Sample
libcef.dll
Resource
win11-20240709-en
Behavioral task
behavioral23
Sample
resources.pak
Resource
win11-20240709-en
Behavioral task
behavioral24
Sample
v8_context_snapshot.bin
Resource
win11-20240709-en
Behavioral task
behavioral25
Sample
vk_swiftshader.dll
Resource
win11-20240709-en
General
-
Target
CefSharp.BrowserSubprocess.Core.dll
-
Size
915KB
-
MD5
100c32f77e68a2ce962e1a28997567ea
-
SHA1
a80a1f4019b8d44df6b5833fb0c51b929fa79843
-
SHA256
c0b9e29b240d8328f2f9a29ca0298ca4d967a926f3174a3442c3730c00d5a926
-
SHA512
f95530ef439fa5c4e3bc02db249b6a76e9d56849816ead83c9cd9bcd49d3443ccb88651d829165c98a67af40b3ef02b922971114f29c5c735e662ca35c0fb6ed
-
SSDEEP
24576:PkwmtUw8kMmxuUjB7v/jFAGGUY9Wis0veKCZ2ZiVBhEDssQjPc8DnXoSiW+YfDxN:PrOer9Wis0veKCZ2ZiVBhEDssQjPc8DT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2756 844 WerFault.exe 80 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4500 wrote to memory of 844 4500 rundll32.exe 80 PID 4500 wrote to memory of 844 4500 rundll32.exe 80 PID 4500 wrote to memory of 844 4500 rundll32.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\CefSharp.BrowserSubprocess.Core.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4500 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\CefSharp.BrowserSubprocess.Core.dll,#12⤵PID:844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 844 -s 9923⤵
- Program crash
PID:2756
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 844 -ip 8441⤵PID:3020