Overview
overview
3Static
static
1processhac...er.exe
windows7-x64
1processhac...er.exe
windows10-2004-x64
1processhac...er.sys
windows7-x64
1processhac...er.sys
windows10-2004-x64
1processhac...ew.exe
windows7-x64
3processhac...ew.exe
windows10-2004-x64
3processhac...ls.dll
windows7-x64
1processhac...ls.dll
windows10-2004-x64
1processhac...ns.dll
windows7-x64
1processhac...ns.dll
windows10-2004-x64
1processhac...es.dll
windows7-x64
1processhac...es.dll
windows10-2004-x64
1processhac...ls.dll
windows7-x64
1processhac...ls.dll
windows10-2004-x64
1processhac...es.dll
windows7-x64
1processhac...es.dll
windows10-2004-x64
1processhac...ls.dll
windows7-x64
1processhac...ls.dll
windows10-2004-x64
1processhac...ks.dll
windows7-x64
1processhac...ks.dll
windows10-2004-x64
1processhac...rt.dll
windows7-x64
1processhac...rt.dll
windows10-2004-x64
1processhac...us.dll
windows7-x64
1processhac...us.dll
windows10-2004-x64
1processhac...er.dll
windows7-x64
1processhac...er.dll
windows10-2004-x64
1processhac...es.dll
windows7-x64
1processhac...es.dll
windows10-2004-x64
1processhac...er.dll
windows7-x64
1processhac...er.dll
windows10-2004-x64
1Analysis
-
max time kernel
134s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
17/08/2024, 13:12
Static task
static1
Behavioral task
behavioral1
Sample
processhacker/ProcessHacker.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
processhacker/ProcessHacker.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
processhacker/kprocesshacker.sys
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
processhacker/kprocesshacker.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
processhacker/peview.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
processhacker/peview.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
processhacker/plugins/DotNetTools.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
processhacker/plugins/DotNetTools.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
processhacker/plugins/ExtendedNotifications.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
processhacker/plugins/ExtendedNotifications.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
processhacker/plugins/ExtendedServices.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
processhacker/plugins/ExtendedServices.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
processhacker/plugins/ExtendedTools.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
processhacker/plugins/ExtendedTools.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
processhacker/plugins/HardwareDevices.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
processhacker/plugins/HardwareDevices.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
processhacker/plugins/NetworkTools.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
processhacker/plugins/NetworkTools.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
processhacker/plugins/OnlineChecks.dll
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
processhacker/plugins/OnlineChecks.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
processhacker/plugins/SbieSupport.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
processhacker/plugins/SbieSupport.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
processhacker/plugins/ToolStatus.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
processhacker/plugins/ToolStatus.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
processhacker/plugins/Updater.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
processhacker/plugins/Updater.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
processhacker/plugins/UserNotes.dll
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
processhacker/plugins/UserNotes.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
processhacker/plugins/WindowExplorer.dll
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
processhacker/plugins/WindowExplorer.dll
Resource
win10v2004-20240802-en
General
-
Target
processhacker/plugins/ExtendedNotifications.dll
-
Size
140KB
-
MD5
be4dc4d2d1d05001ab0bb2bb8659bfad
-
SHA1
c0ed9e375b447b61c07c0b00c93bb81c87bcfc2e
-
SHA256
61e8cd8de80a5c0d7ced280fe04ad8387a846a7bf2ee51bcbba96b971c7c1795
-
SHA512
31389e268fe3bf1175fa3c251ca026f77dc59361b8425c9826f31d18c5174e6de68c6092aef187f2bd2c92d89b3093a660b2fe6189af369293c1117c856b5cdf
-
SSDEEP
3072:ucUs2pkSTVRC6//SZDTWeEd1D6gyqAnr6rw8N9TZof:ua2zRC6ncXWl4
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\processhacker\plugins\ExtendedNotifications.dll,#11⤵PID:4196
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3264,i,3210801877307184477,8078594481454001567,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:81⤵PID:2924