Overview
overview
7Static
static
7PAIcom/PAI...ds.exe
windows7-x64
7PAIcom/PAI...ds.exe
windows10-2004-x64
7PAIcom/PAI...UI.dll
windows7-x64
1PAIcom/PAI...UI.dll
windows10-2004-x64
1PAIcom/PAI...ug.exe
windows7-x64
3PAIcom/PAI...ug.exe
windows10-2004-x64
3PAIcom/PAI...om.exe
windows7-x64
6PAIcom/PAI...om.exe
windows10-2004-x64
6PAIcom/PAI...me.bat
windows7-x64
1PAIcom/PAI...me.bat
windows10-2004-x64
1PAIcom/PAI...ds.bat
windows7-x64
1PAIcom/PAI...ds.bat
windows10-2004-x64
1PAIcom/PAI...it.bat
windows7-x64
1PAIcom/PAI...it.bat
windows10-2004-x64
1PAIcom/PAI...le.bat
windows7-x64
1PAIcom/PAI...le.bat
windows10-2004-x64
1PAIcom/PAI...er.exe
windows7-x64
3PAIcom/PAI...er.exe
windows10-2004-x64
3PAIcom/PAI...te.exe
windows7-x64
1PAIcom/PAI...te.exe
windows10-2004-x64
1PAIcom/PAI...ne.bat
windows7-x64
1PAIcom/PAI...ne.bat
windows10-2004-x64
1PAIcom/PAI...es.exe
windows7-x64
1PAIcom/PAI...es.exe
windows10-2004-x64
1PAIcom/PAI...ns.exe
windows7-x64
3PAIcom/PAI...ns.exe
windows10-2004-x64
3PAIcom/PAI...ug.bat
windows7-x64
1PAIcom/PAI...ug.bat
windows10-2004-x64
1PAIcom/PAI...am.bat
windows7-x64
1PAIcom/PAI...am.bat
windows10-2004-x64
1PAIcom/PAI...m2.bat
windows7-x64
1PAIcom/PAI...m2.bat
windows10-2004-x64
1Analysis
-
max time kernel
137s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29-08-2024 06:34
Behavioral task
behavioral1
Sample
PAIcom/PAIcom/Commands.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
PAIcom/PAIcom/Commands.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
PAIcom/PAIcom/Guna.UI.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
PAIcom/PAIcom/Guna.UI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
PAIcom/PAIcom/PAIcom-Debug.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
PAIcom/PAIcom/PAIcom-Debug.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
PAIcom/PAIcom/PAIcom.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
PAIcom/PAIcom/PAIcom.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
PAIcom/PAIcom/chrome.bat
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
PAIcom/PAIcom/chrome.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
PAIcom/PAIcom/commands.bat
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
PAIcom/PAIcom/commands.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
PAIcom/PAIcom/exit.bat
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
PAIcom/PAIcom/exit.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
PAIcom/PAIcom/invisible.bat
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
PAIcom/PAIcom/invisible.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
PAIcom/PAIcom/mod-helper.exe
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
PAIcom/PAIcom/mod-helper.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
PAIcom/PAIcom/mute.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
PAIcom/PAIcom/mute.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
PAIcom/PAIcom/online.bat
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
PAIcom/PAIcom/online.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
PAIcom/PAIcom/privileges.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
PAIcom/PAIcom/privileges.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
PAIcom/PAIcom/skins.exe
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
PAIcom/PAIcom/skins.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
PAIcom/PAIcom/smug.bat
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
PAIcom/PAIcom/smug.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
PAIcom/PAIcom/steam.bat
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
PAIcom/PAIcom/steam.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
PAIcom/PAIcom/steam2.bat
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
PAIcom/PAIcom/steam2.bat
Resource
win10v2004-20240802-en
General
-
Target
PAIcom/PAIcom/steam.bat
-
Size
34B
-
MD5
beb642d83777b5632d01b12f1b7de945
-
SHA1
7c72da4c48fe178a87aacc3031db420f30183b63
-
SHA256
93d4ef7b160ded75ea681ac114100ec28ecbd4f8b44762d33b39449954ac70cf
-
SHA512
3e82498954dd98dea227184415006c7d7be5db11f66a8129d4262fc9c9ca048c1b520d41179bc8ab036a90409ecf7a4cf6898d9cad5aed3e417fdc5a4bce54f2
Malware Config
Signatures
-
Modifies registry class 1 IoCs
Processes:
explorer.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-786284298-625481688-3210388970-1000_Classes\Local Settings explorer.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 4528 OpenWith.exe -
Suspicious use of WriteProcessMemory 2 IoCs
Processes:
cmd.exedescription pid process target process PID 2732 wrote to memory of 3820 2732 cmd.exe explorer.exe PID 2732 wrote to memory of 3820 2732 cmd.exe explorer.exe
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\PAIcom\PAIcom\steam.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:2732 -
C:\Windows\explorer.exeexplorer "steam://nav/games"2⤵PID:3820
-
C:\Windows\explorer.exeC:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding1⤵
- Modifies registry class
PID:2032
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4528