Overview
overview
10Static
static
3Softwere L...1..exe
windows7-x64
10Softwere L...1..exe
windows10-2004-x64
10Softwere L...e.html
windows7-x64
1Softwere L...e.html
windows10-2004-x64
1Softwere L...32.dll
windows7-x64
1Softwere L...32.dll
windows10-2004-x64
1Softwere L...ge.dll
windows7-x64
1Softwere L...ge.dll
windows10-2004-x64
1Softwere L...32.dll
windows7-x64
1Softwere L...32.dll
windows10-2004-x64
1Softwere L...ge.dll
windows7-x64
1Softwere L...ge.dll
windows10-2004-x64
1Softwere L...32.dll
windows7-x64
3Softwere L...32.dll
windows10-2004-x64
3Softwere L...ge.dll
windows7-x64
3Softwere L...ge.dll
windows10-2004-x64
3Softwere L...wt.dll
windows7-x64
1Softwere L...wt.dll
windows10-2004-x64
1Softwere L...ci.dll
windows7-x64
3Softwere L...ci.dll
windows10-2004-x64
3Softwere L...pr.dll
windows7-x64
1Softwere L...pr.dll
windows10-2004-x64
1Softwere L...se.dll
windows7-x64
3Softwere L...se.dll
windows10-2004-x64
3Softwere L...oy.dll
windows7-x64
3Softwere L...oy.dll
windows10-2004-x64
3Softwere L...em.dll
windows7-x64
3Softwere L...em.dll
windows10-2004-x64
3Softwere L...et.dll
windows7-x64
1Softwere L...et.dll
windows10-2004-x64
1Softwere L...a1.dll
windows7-x64
1Softwere L...a1.dll
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23-07-2024 02:53
Static task
static1
Behavioral task
behavioral1
Sample
Softwere Launcher_v3.1.1/Softwere.Launcher_v3.1.1..exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Softwere Launcher_v3.1.1/Softwere.Launcher_v3.1.1..exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
Softwere Launcher_v3.1.1/v2024/Welcome.html
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Softwere Launcher_v3.1.1/v2024/Welcome.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Softwere Launcher_v3.1.1/v2024/bin/JAWTAccessBridge-32.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Softwere Launcher_v3.1.1/v2024/bin/JAWTAccessBridge-32.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Softwere Launcher_v3.1.1/v2024/bin/JAWTAccessBridge.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Softwere Launcher_v3.1.1/v2024/bin/JAWTAccessBridge.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Softwere Launcher_v3.1.1/v2024/bin/JavaAccessBridge-32.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Softwere Launcher_v3.1.1/v2024/bin/JavaAccessBridge-32.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Softwere Launcher_v3.1.1/v2024/bin/JavaAccessBridge.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Softwere Launcher_v3.1.1/v2024/bin/JavaAccessBridge.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Softwere Launcher_v3.1.1/v2024/bin/WindowsAccessBridge-32.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Softwere Launcher_v3.1.1/v2024/bin/WindowsAccessBridge-32.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
Softwere Launcher_v3.1.1/v2024/bin/WindowsAccessBridge.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Softwere Launcher_v3.1.1/v2024/bin/WindowsAccessBridge.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Softwere Launcher_v3.1.1/v2024/bin/awt.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Softwere Launcher_v3.1.1/v2024/bin/awt.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Softwere Launcher_v3.1.1/v2024/bin/bci.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Softwere Launcher_v3.1.1/v2024/bin/bci.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
Softwere Launcher_v3.1.1/v2024/bin/dcpr.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Softwere Launcher_v3.1.1/v2024/bin/dcpr.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Softwere Launcher_v3.1.1/v2024/bin/decora_sse.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Softwere Launcher_v3.1.1/v2024/bin/decora_sse.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
Softwere Launcher_v3.1.1/v2024/bin/deploy.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Softwere Launcher_v3.1.1/v2024/bin/deploy.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
Softwere Launcher_v3.1.1/v2024/bin/dt_shmem.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
Softwere Launcher_v3.1.1/v2024/bin/dt_shmem.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Softwere Launcher_v3.1.1/v2024/bin/dt_socket.dll
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
Softwere Launcher_v3.1.1/v2024/bin/dt_socket.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
Softwere Launcher_v3.1.1/v2024/bin/dtplugin/deployJava1.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Softwere Launcher_v3.1.1/v2024/bin/dtplugin/deployJava1.dll
Resource
win10v2004-20240709-en
General
-
Target
Softwere Launcher_v3.1.1/v2024/bin/bci.dll
-
Size
15KB
-
MD5
a46289384f76c2a41ba7251459849288
-
SHA1
4d8ef96edbe07c8722fa24e4a5b96ebfa18be2c4
-
SHA256
728d64bc1fbf48d4968b1b93893f1b5db88b052ab82202c6840bf7886a64017d
-
SHA512
34d62beb1fa7d8630f5562c1e48839ce9429faea980561e58076df5f19755761454eeb882790ec1035c64c654fc1a8cd5eb46eca12e2bc81449acbb73296c9e8
-
SSDEEP
384:1Td3hw/L3kKLnYgIOGOOssnPV5Lnf6onYPLr7EbH:1zw/bkKLt7KnddnfPC7S
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4184 2776 WerFault.exe 85 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3192 wrote to memory of 2776 3192 rundll32.exe 85 PID 3192 wrote to memory of 2776 3192 rundll32.exe 85 PID 3192 wrote to memory of 2776 3192 rundll32.exe 85
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Softwere Launcher_v3.1.1\v2024\bin\bci.dll",#11⤵
- Suspicious use of WriteProcessMemory
PID:3192 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Softwere Launcher_v3.1.1\v2024\bin\bci.dll",#12⤵PID:2776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2776 -s 6043⤵
- Program crash
PID:4184
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2776 -ip 27761⤵PID:4744