Overview

overview

7

Static

static

3

winamp551_...mb.exe

windows7-x64

7

winamp551_...mb.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...pi.exe

windows7-x64

1

$PLUGINSDI...pi.exe

windows10-2004-x64

1

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

1

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

1

Plugins/Gr...X3.dll

windows7-x64

3

Plugins/Gr...X3.dll

windows10-2004-x64

3

Plugins/Gr..._3.dll

windows7-x64

1

Plugins/Gr..._3.dll

windows10-2004-x64

3

Plugins/Gr...EX.dll

windows7-x64

1

Plugins/Gr...EX.dll

windows10-2004-x64

3

Plugins/Gr...X1.dll

windows7-x64

3

Plugins/Gr...X1.dll

windows10-2004-x64

3

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

1

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

1

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

3

Plugins/ds...er.dll

windows7-x64

1

Plugins/ds...er.dll

windows10-2004-x64

1

Plugins/en...us.dll

windows7-x64

3

Plugins/en...us.dll

windows10-2004-x64

3

Plugins/enc_flac.dll

windows7-x64

1

Plugins/enc_flac.dll

windows10-2004-x64

1

Plugins/enc_lame.dll

windows7-x64

1

Plugins/enc_lame.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13-07-2024 15:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    winamp551_Plus_zmb.exe

  • Size

    9.5MB

  • MD5

    ee4e3a6a39282fff632b779177e3066b

  • SHA1

    3dccb4ce2d4592c70e228f87dab4add88499f27c

  • SHA256

    cef9b5ac2a30d274b69fe5a671e9fe3d7fc2e0dd08837f6dca9f02ae16064765

  • SHA512

    cda54c4ae003e9b14fcfea94af58d626930a0de2a196e3be6ca046dba7f6ca51bf7e2773c8aea3dbbb3b8eea14b9660be657a76990614188781151122be74d39

  • SSDEEP

    196608:Qbihab0rdPNIOymKGObXpNAflfBJ62xQjgWnG673XqBeWUw1zN1:no0r8O3OvA9fBJ3xQUWn5L6Bj11J1

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\winamp551_Plus_zmb.exe
    "C:\Users\Admin\AppData\Local\Temp\winamp551_Plus_zmb.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nst319D.tmp\ioSpecial.ini
    Filesize

    839B

    MD5

    0a6b60421771627ae655cfedbbef05e3

    SHA1

    2e1be3cf10d3a59f6619a2cdc52739f99d90fd12

    SHA256

    3763ff0dd043e41c0fa323d19fcf997f4a2ef066acd587656d78916dffe7fd2f

    SHA512

    4655f3754ab2114ec1490566b978e9c431a83f13594ed0093646b42dc35c616c742fa5eef25c7a496a0e4945b518a462ce05a99619e75e3a95630973eb5060a1

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nst319D.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    Download Submit