a9ffe5bb14b05e775f34f9eeff41fca89a350d49252eedae1e330e88952e7f36

Submit
Reports

Overview

overview

Static

static

BetterJoyForCemu.exe

windows7-x64

BetterJoyForCemu.exe

windows10-2004-x64

Crc32.NET.dll

windows7-x64

Crc32.NET.dll

windows10-2004-x64

Drivers/HI...n).bat

windows7-x64

Drivers/HI...n).bat

windows10-2004-x64

Drivers/HI...n).bat

windows7-x64

Drivers/HI...n).bat

windows10-2004-x64

Drivers/HI...ib.dll

windows7-x64

Drivers/HI...ib.dll

windows10-2004-x64

Drivers/HI...sts.js

windows7-x64

Drivers/HI...sts.js

windows10-2004-x64

Drivers/HI...els.js

windows7-x64

Drivers/HI...els.js

windows10-2004-x64

Drivers/HI...min.js

windows7-x64

Drivers/HI...min.js

windows10-2004-x64

Drivers/HI...min.js

windows7-x64

Drivers/HI...min.js

windows10-2004-x64

Drivers/HI...min.js

windows7-x64

Drivers/HI...min.js

windows10-2004-x64

Drivers/HI...min.js

windows7-x64

Drivers/HI...min.js

windows10-2004-x64

Drivers/HI...min.js

windows7-x64

Drivers/HI...min.js

windows10-2004-x64

Drivers/HI...rv.exe

windows7-x64

Drivers/HI...rv.exe

windows10-2004-x64

Drivers/HI...x.html

windows7-x64

Drivers/HI...x.html

windows10-2004-x64

Drivers/HI...an.sys

windows10-2004-x64

Drivers/HI...09.dll

windows7-x64

Drivers/HI...09.dll

windows10-2004-x64

Drivers/HI...on.exe

windows10-2004-x64

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21/09/2024, 03:23

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

BetterJoyForCemu.exe

Resource

win7-20240704-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

BetterJoyForCemu.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

Crc32.NET.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Crc32.NET.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Drivers/HIDGuardian/HIDGuardian Install (Run as Admin).bat

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

Drivers/HIDGuardian/HIDGuardian Install (Run as Admin).bat

Resource

win10v2004-20240802-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

Drivers/HIDGuardian/HIDGuardian Uninstall (Run as Admin).bat

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Drivers/HIDGuardian/HIDGuardian Uninstall (Run as Admin).bat

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Lib.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Lib.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/custom/api-requests.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/custom/api-requests.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/custom/viewmodels.js

Resource

win7-20240704-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/custom/viewmodels.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/bootstrap.min.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/bootstrap.min.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery-3.2.1.min.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery-3.2.1.min.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery.form.min.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery.form.min.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/knockout-min.js

Resource

win7-20240708-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/knockout-min.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/knockout.mapping.min.js

Resource

win7-20240903-en

discovery execution

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/knockout.mapping.min.js

Resource

win10v2004-20240802-en

discovery execution

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/HidCerberus.Srv.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/HidCerberus.Srv.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/index.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/index.html

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Drivers/HIDGuardian/_drivers/HidGuardian/HidGuardian.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Drivers/HIDGuardian/_drivers/HidGuardian/WdfCoinstaller01009.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Drivers/HIDGuardian/_drivers/HidGuardian/WdfCoinstaller01009.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Drivers/HIDGuardian/_drivers/devcon.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery-3.2.1.min.js
Size

84KB
MD5

473957cfb255a781b42cb2af51d54a3b
SHA1

67bdacbd077ee59f411109fd119ee9f58db15a5f
SHA256

75b707d8761e2bfbd25fbd661f290a4f7fd11c48e1bf53a36dc6bd8a0034fa35
SHA512

20da3fe171c075635ef82f8de57644c7a50be45eb1207d96a51b5eadeaac17ee830b5058d87e88501e20ec41ef897f65cec26a0380eaf49698c6eaa5981d8483
SSDEEP

1536:TNhEyjjTikEJO4edXXe9J578go6MWX2xkjde4c4j2ll2AckaXE46n15HZ+FhFcQ+:Vxc2yji4j2uC/kcQDU8CuE

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Drivers\HIDGuardian\_drivers\HidCerberus.Srv\Content\dep\jquery-3.2.1.min.js
1⤵
PID:2056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads