Overview
overview
7Static
static
3lib/freetype.dll
windows7-x64
1lib/freetype.dll
windows10-2004-x64
1lib/harfbuzz.dll
windows7-x64
1lib/harfbuzz.dll
windows10-2004-x64
1lib/libglib-2.0-0.dll
windows7-x64
1lib/libglib-2.0-0.dll
windows10-2004-x64
1lib/libintl-8.dll
windows7-x64
1lib/libintl-8.dll
windows10-2004-x64
1lib/libpcre2-8.dll
windows7-x64
1lib/libpcre2-8.dll
windows10-2004-x64
1lib/libsharpyuv.dll
windows7-x64
1lib/libsharpyuv.dll
windows10-2004-x64
1lib/libwebp.dll
windows7-x64
1lib/libwebp.dll
windows10-2004-x64
1lib/libweb...er.dll
windows7-x64
1lib/libweb...er.dll
windows10-2004-x64
1lib/libwebpdemux.dll
windows7-x64
1lib/libwebpdemux.dll
windows10-2004-x64
1lib/onnxruntime.dll
windows7-x64
1lib/onnxruntime.dll
windows10-2004-x64
1lib/onnxru...ed.dll
windows7-x64
1lib/onnxru...ed.dll
windows10-2004-x64
1lib/ovrlipsync.dll
windows7-x64
1lib/ovrlipsync.dll
windows10-2004-x64
1lib/spout.dll
windows7-x64
1lib/spout.dll
windows10-2004-x64
1lib/wren.dll
windows7-x64
1lib/wren.dll
windows10-2004-x64
1veadotube_mini.exe
windows7-x64
1veadotube_mini.exe
windows10-2004-x64
7Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
16/07/2024, 03:31
Static task
static1
Behavioral task
behavioral1
Sample
lib/freetype.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
lib/freetype.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
lib/harfbuzz.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
lib/harfbuzz.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
lib/libglib-2.0-0.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
lib/libglib-2.0-0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
lib/libintl-8.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
lib/libintl-8.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
lib/libpcre2-8.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
lib/libpcre2-8.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
lib/libsharpyuv.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
lib/libsharpyuv.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
lib/libwebp.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
lib/libwebp.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
lib/libwebpdecoder.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
lib/libwebpdecoder.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
lib/libwebpdemux.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
lib/libwebpdemux.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
lib/onnxruntime.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
lib/onnxruntime.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
lib/onnxruntime_providers_shared.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
lib/onnxruntime_providers_shared.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
lib/ovrlipsync.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
lib/ovrlipsync.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
lib/spout.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
lib/spout.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
lib/wren.dll
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
lib/wren.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
veadotube_mini.exe
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
veadotube_mini.exe
Resource
win10v2004-20240709-en
General
-
Target
lib/libglib-2.0-0.dll
-
Size
1.4MB
-
MD5
5aa5bd73bf50a34ba5da4fc516575459
-
SHA1
021fc405ea9cd0486e6244c6906f30446e96a9b0
-
SHA256
1c8027b5eda4fcefdfb7f28f5d2c33b3731c273cd161a6a6e435b25c6dde9e8d
-
SHA512
11b7881a00fde3259c47c67758d9e9a9776ff95e8ec8539655a8f34153e1b7c8b0a7261e4c2fdb2e52181859d35ee480d6711528a5b266235ca4e9ceb52f765a
-
SSDEEP
24576:Ojbp3cn8ldnOwfm0Q9AbxkVxLe0rhC3rSiXkXAHb/ISglYg1xwbdFIvA2+qFSChn:Ojbp3cGdnOwfaabxkVxLe0rg3rLXkwHE
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2536 wrote to memory of 2124 2536 rundll32.exe 31 PID 2536 wrote to memory of 2124 2536 rundll32.exe 31 PID 2536 wrote to memory of 2124 2536 rundll32.exe 31