Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 21:40
Behavioral task
behavioral1
Sample
100% wh/opengl32.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral2
Sample
100% wh/opengl32.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
100% wh/opengl32.exe
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral4
Sample
100% wh/opengl32.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
CS-WH.Ru - Читы, статьи и др для CS.url
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral6
Sample
CS-WH.Ru - Читы, статьи и др для CS.url
Resource
win10v2004-20240709-en
windows10-2004-x64
General
-
Target
100% wh/opengl32.exe
-
Size
168KB
-
MD5
ca05dae1f407886dea9cf80610d0a5da
-
SHA1
e29543487dc80c1abac3c60cb1f2e1637f6d628f
-
SHA256
179d2fb548a44bb1a5309021d3046af7a50eac35d6e32ee529b4682b16e8dc51
-
SHA512
e7351cb6fc141b38f739524dfbb202c35d4d868694b5faea3b6eea78d2cbea337ebd5d07e0c639fe7e5e31a294f558c23fad66082a8386a1e6a7d47ffe7e097d
-
SSDEEP
3072:naEkQF1LfpDUfZmdMddedVMddhdSNqAOSPPddEjkI34iseddddeddr+OduIrGkU:FkQ7zdMddedVMddhdSNqAOSPPddEjkIC
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe 1948 opengl32.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeSecurityPrivilege 1948 opengl32.exe