Overview
overview
7Static
static
3SSShim/Cfg...cy.dll
windows10-2004-x64
1SSShim/ChatApis.dll
windows10-2004-x64
1SSShim/SSShim.dll
windows10-2004-x64
1SSShim/com...re.dll
windows10-2004-x64
1cmdial32/P...st.dll
windows10-2004-x64
1cmdial32/c...vc.dll
windows10-2004-x64
1cmdial32/cmdial32.dll
windows10-2004-x64
1cmdial32/puiapi.dll
windows10-2004-x64
1dcntel/DafDnsSd.dll
windows10-2004-x64
1dcntel/DuCsps.dll
windows10-2004-x64
1dcntel/dcntel.dll
windows10-2004-x64
1dcntel/kbdnecat.dll
windows10-2004-x64
1setup.msi
windows7-x64
6setup.msi
windows10-2004-x64
6syssetup/S...pi.dll
windows10-2004-x64
1syssetup/sendmail.dll
windows10-2004-x64
1syssetup/syssetup.dll
windows10-2004-x64
1syssetup/vcamp140.dll
windows7-x64
1syssetup/vcamp140.dll
windows10-2004-x64
1werconcpl/...et.dll
windows10-2004-x64
1werconcpl/...p1.dll
windows10-2004-x64
1werconcpl/ndishc.dll
windows10-2004-x64
7werconcpl/...pl.dll
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
01-08-2024 21:14
Static task
static1
Behavioral task
behavioral1
Sample
SSShim/CfgSPPolicy.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
SSShim/ChatApis.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
SSShim/SSShim.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral4
Sample
SSShim/computecore.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
cmdial32/PrintRenderAPIHost.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral6
Sample
cmdial32/cloudidsvc.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral7
Sample
cmdial32/cmdial32.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral8
Sample
cmdial32/puiapi.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
dcntel/DafDnsSd.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral10
Sample
dcntel/DuCsps.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
dcntel/dcntel.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral12
Sample
dcntel/kbdnecat.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
setup.msi
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
setup.msi
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
syssetup/SensorsApi.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral16
Sample
syssetup/sendmail.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral17
Sample
syssetup/syssetup.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral18
Sample
syssetup/vcamp140.dll
Resource
win7-20240704-en
Behavioral task
behavioral19
Sample
syssetup/vcamp140.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral20
Sample
werconcpl/Websocket.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral21
Sample
werconcpl/imagesp1.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral22
Sample
werconcpl/ndishc.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral23
Sample
werconcpl/werconcpl.dll
Resource
win10v2004-20240730-en
General
-
Target
SSShim/SSShim.dll
-
Size
127KB
-
MD5
87a9f6512140d4e8cf244004b80ee73d
-
SHA1
e836041852dba214e9e2f75a349628b92280e8a1
-
SHA256
b7b7a2499f0ac528d925e70a277bba8afc9d7cd226717425133fbb00f1f54020
-
SHA512
65837577fddbcd01d7fde92afaf7c4acc592e7fe1db6294cfd6c52486996bf43969b1bab22b813f6b0f4d2a302d59cda3138f05836e41c2b5cc8c8c3b9ab4102
-
SSDEEP
1536:bRQ3PMfYa5lhXbqkomoXQXMDwLtaF3jCmuKFI/GGBmUCAuOxmN2qw4P:liUfThGmqo0p3jCRcGAAuOcDw4
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request71.31.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request88.210.23.2.in-addr.arpaIN PTRResponse88.210.23.2.in-addr.arpaIN PTRa2-23-210-88deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request198.187.3.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request147.142.123.92.in-addr.arpaIN PTRResponse147.142.123.92.in-addr.arpaIN PTRa92-123-142-147deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request240.143.123.92.in-addr.arpaIN PTRResponse240.143.123.92.in-addr.arpaIN PTRa92-123-143-240deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request21.236.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request7.173.189.20.in-addr.arpaIN PTRResponse
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
71.31.126.40.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
88.210.23.2.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
198.187.3.20.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
147.142.123.92.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
240.143.123.92.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
21.236.111.52.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
7.173.189.20.in-addr.arpa