Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
03-09-2024 07:53
Behavioral task
behavioral1
Sample
WaspLoader/Guna.UI2.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
WaspLoader/Guna.UI2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
WaspLoader/WaspLoader.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
WaspLoader/WaspLoader.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
WaspLoader/inject-c.exe
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
WaspLoader/inject-c.exe
Resource
win10v2004-20240802-en
General
-
Target
WaspLoader/inject-c.exe
-
Size
12.2MB
-
MD5
e6333b1e880f784228ebba74fcb76a88
-
SHA1
0ded82ee467b4012b45eef9878402f50b7be17c4
-
SHA256
c40fe901f365043c08b3053830e4bef1b496dbec93e6ca33c891f58f14006aff
-
SHA512
1c5bbd9b6cbd0418133186f5e977c7a66915ddd128e3a478acbc92042bcf8a3ee2b2f93ea23849caab1730a329adf96dfacb5d1d9453ccdd86266ddf8442fef6
-
SSDEEP
196608:QDiIMDzDKVkcZun3LVFh/Nx/UDvFRCTLFLmYgpmrvtjlHL9r5R3nRn3Z6Hw2lLFO:Ui/DY0bpNxGULmwvBlHLxN32V5s
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1856 inject-c.exe 1856 inject-c.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1856 inject-c.exe