Overview
overview
9Static
static
9hwid pack/...sk.exe
windows10-1703-x64
6hwid pack/...up.exe
windows10-1703-x64
3hwid pack/...RU.exe
windows10-1703-x64
3hwid pack/...ll.exe
windows10-1703-x64
3hwid pack/...rt.exe
windows10-1703-x64
5hwid pack/...64.exe
windows10-1703-x64
5hwid pack/...IN.exe
windows10-1703-x64
3hwid pack/...64.exe
windows10-1703-x64
1hwid pack/...16.exe
windows10-1703-x64
hwid pack/...IT.exe
windows10-1703-x64
1hwid pack/...LL.dll
windows10-1703-x64
3hwid pack/...YS.sys
windows10-1703-x64
1hwid pack/...64.sys
windows10-1703-x64
1hwid pack/...64.sys
windows10-1703-x64
1hwid pack/...lp.pdf
windows10-1703-x64
3hwid pack/...rt.exe
windows10-1703-x64
3hwid pack/...Un.exe
windows10-1703-x64
6hwid pack/...Un.exe
windows10-1703-x64
6hwid pack/...ew.chm
windows10-1703-x64
1hwid pack/...ew.exe
windows10-1703-x64
6Analysis
-
max time kernel
133s -
max time network
135s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
01-08-2024 21:16
Behavioral task
behavioral1
Sample
hwid pack/HardDisk.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
hwid pack/MacSetup.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
hwid pack/monitor serial/CRU.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
hwid pack/monitor serial/reset-all.exe
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
hwid pack/monitor serial/restart.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
hwid pack/monitor serial/restart64.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
hwid pack/serial changer/AMIDEWIN.exe
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
hwid pack/serial changer/AMIDEWINx64.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
hwid pack/serial changer/DMI16.exe
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
hwid pack/serial changer/DMIEDIT.exe
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
hwid pack/serial changer/UCOREDLL.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
hwid pack/serial changer/UCORESYS.sys
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
hwid pack/serial changer/UCOREW64.sys
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
hwid pack/serial changer/amifldrv64.sys
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
hwid pack/uninstall/Revo Uninstaller Help.pdf
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
hwid pack/uninstall/RevoUPort.exe
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
hwid pack/uninstall/x64/RevoUn.exe
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
hwid pack/uninstall/x86/RevoUn.exe
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
hwid pack/usb device serial/USBDeview.chm
Resource
win10-20240611-en
Behavioral task
behavioral20
Sample
hwid pack/usb device serial/USBDeview.exe
Resource
win10-20240404-en
General
-
Target
hwid pack/serial changer/DMIEDIT.exe
-
Size
3.2MB
-
MD5
fbaf6262fd84f9966338518d4de46fdd
-
SHA1
291d481e3b42029e157e7c60febc8fe67cd50cf1
-
SHA256
5d37e5e7ce01549965bf2166adcba33d1e2c4bd2c90711032f3987b58452ce49
-
SHA512
5d8cc6e1ab85fae8d9a5ffa83cecc2608b1fbbb28b9e80afe2dc6f7d46b657d489e03f75e42fc147d49313b3a41ad768fd0f320a905cbc41d767c0fc3c3d9d7e
-
SSDEEP
49152:VOQ6nNB9ySqeDoVFixOA9DruNebQk9DtTKkuecMC+coEbyxvgg+lV:D6nwNomN1AKku1M2Jfj
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 1 IoCs
pid Process 632 Process not Found