Overview
overview
7Static
static
7PAIcom/PAI...ds.exe
windows7-x64
7PAIcom/PAI...ds.exe
windows10-2004-x64
7PAIcom/PAI...UI.dll
windows7-x64
1PAIcom/PAI...UI.dll
windows10-2004-x64
1PAIcom/PAI...ug.exe
windows7-x64
3PAIcom/PAI...ug.exe
windows10-2004-x64
3PAIcom/PAI...om.exe
windows7-x64
6PAIcom/PAI...om.exe
windows10-2004-x64
6PAIcom/PAI...me.bat
windows7-x64
1PAIcom/PAI...me.bat
windows10-2004-x64
1PAIcom/PAI...ds.bat
windows7-x64
1PAIcom/PAI...ds.bat
windows10-2004-x64
1PAIcom/PAI...it.bat
windows7-x64
1PAIcom/PAI...it.bat
windows10-2004-x64
1PAIcom/PAI...le.bat
windows7-x64
1PAIcom/PAI...le.bat
windows10-2004-x64
1PAIcom/PAI...er.exe
windows7-x64
3PAIcom/PAI...er.exe
windows10-2004-x64
3PAIcom/PAI...te.exe
windows7-x64
1PAIcom/PAI...te.exe
windows10-2004-x64
1PAIcom/PAI...ne.bat
windows7-x64
1PAIcom/PAI...ne.bat
windows10-2004-x64
1PAIcom/PAI...es.exe
windows7-x64
1PAIcom/PAI...es.exe
windows10-2004-x64
1PAIcom/PAI...ns.exe
windows7-x64
3PAIcom/PAI...ns.exe
windows10-2004-x64
3PAIcom/PAI...ug.bat
windows7-x64
1PAIcom/PAI...ug.bat
windows10-2004-x64
1PAIcom/PAI...am.bat
windows7-x64
1PAIcom/PAI...am.bat
windows10-2004-x64
1PAIcom/PAI...m2.bat
windows7-x64
1PAIcom/PAI...m2.bat
windows10-2004-x64
1Analysis
-
max time kernel
146s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29-08-2024 06:34
Behavioral task
behavioral1
Sample
PAIcom/PAIcom/Commands.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
PAIcom/PAIcom/Commands.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
PAIcom/PAIcom/Guna.UI.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
PAIcom/PAIcom/Guna.UI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
PAIcom/PAIcom/PAIcom-Debug.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
PAIcom/PAIcom/PAIcom-Debug.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
PAIcom/PAIcom/PAIcom.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
PAIcom/PAIcom/PAIcom.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
PAIcom/PAIcom/chrome.bat
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
PAIcom/PAIcom/chrome.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
PAIcom/PAIcom/commands.bat
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
PAIcom/PAIcom/commands.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
PAIcom/PAIcom/exit.bat
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
PAIcom/PAIcom/exit.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
PAIcom/PAIcom/invisible.bat
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
PAIcom/PAIcom/invisible.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
PAIcom/PAIcom/mod-helper.exe
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
PAIcom/PAIcom/mod-helper.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
PAIcom/PAIcom/mute.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
PAIcom/PAIcom/mute.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
PAIcom/PAIcom/online.bat
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
PAIcom/PAIcom/online.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
PAIcom/PAIcom/privileges.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
PAIcom/PAIcom/privileges.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
PAIcom/PAIcom/skins.exe
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
PAIcom/PAIcom/skins.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
PAIcom/PAIcom/smug.bat
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
PAIcom/PAIcom/smug.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
PAIcom/PAIcom/steam.bat
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
PAIcom/PAIcom/steam.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
PAIcom/PAIcom/steam2.bat
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
PAIcom/PAIcom/steam2.bat
Resource
win10v2004-20240802-en
General
-
Target
PAIcom/PAIcom/exit.bat
-
Size
23B
-
MD5
27377e613c1cea099ef2ffd3198ab730
-
SHA1
310a2a657c490106c26b665a5a2cba891f1fb6e3
-
SHA256
17e55524045d62522bb85244e891964d4b20c026b11b2426a18795b4d1e44f5f
-
SHA512
ef87a7fbb5640d4a521c66600358b80d360026bd10cff8dbc732121f588ed2eb40864c92d387682ede23cbc036ff07a89573bbda04e6dea1f07f34fce8ef6d14
Malware Config
Signatures
-
Kills process with taskkill 1 IoCs
Processes:
taskkill.exepid process 4616 taskkill.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
taskkill.exedescription pid process Token: SeDebugPrivilege 4616 taskkill.exe -
Suspicious use of WriteProcessMemory 2 IoCs
Processes:
cmd.exedescription pid process target process PID 4288 wrote to memory of 4616 4288 cmd.exe taskkill.exe PID 4288 wrote to memory of 4616 4288 cmd.exe taskkill.exe
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\PAIcom\PAIcom\exit.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:4288 -
C:\Windows\system32\taskkill.exetaskkill /im PAIcom.exe2⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:4616