Overview
overview
7Static
static
3BetterJoyForCemu.exe
windows7-x64
7BetterJoyForCemu.exe
windows10-2004-x64
7Crc32.NET.dll
windows7-x64
1Crc32.NET.dll
windows10-2004-x64
1Drivers/HI...n).bat
windows7-x64
5Drivers/HI...n).bat
windows10-2004-x64
5Drivers/HI...n).bat
windows7-x64
1Drivers/HI...n).bat
windows10-2004-x64
1Drivers/HI...ib.dll
windows7-x64
1Drivers/HI...ib.dll
windows10-2004-x64
1Drivers/HI...sts.js
windows7-x64
3Drivers/HI...sts.js
windows10-2004-x64
3Drivers/HI...els.js
windows7-x64
3Drivers/HI...els.js
windows10-2004-x64
3Drivers/HI...min.js
windows7-x64
3Drivers/HI...min.js
windows10-2004-x64
3Drivers/HI...min.js
windows7-x64
3Drivers/HI...min.js
windows10-2004-x64
3Drivers/HI...min.js
windows7-x64
3Drivers/HI...min.js
windows10-2004-x64
3Drivers/HI...min.js
windows7-x64
3Drivers/HI...min.js
windows10-2004-x64
3Drivers/HI...min.js
windows7-x64
3Drivers/HI...min.js
windows10-2004-x64
3Drivers/HI...rv.exe
windows7-x64
1Drivers/HI...rv.exe
windows10-2004-x64
1Drivers/HI...x.html
windows7-x64
3Drivers/HI...x.html
windows10-2004-x64
1Drivers/HI...an.sys
windows10-2004-x64
1Drivers/HI...09.dll
windows7-x64
1Drivers/HI...09.dll
windows10-2004-x64
1Drivers/HI...on.exe
windows10-2004-x64
1Analysis
-
max time kernel
129s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21/09/2024, 03:23
Static task
static1
Behavioral task
behavioral1
Sample
BetterJoyForCemu.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
BetterJoyForCemu.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Crc32.NET.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Crc32.NET.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Drivers/HIDGuardian/HIDGuardian Install (Run as Admin).bat
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Drivers/HIDGuardian/HIDGuardian Install (Run as Admin).bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Drivers/HIDGuardian/HIDGuardian Uninstall (Run as Admin).bat
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Drivers/HIDGuardian/HIDGuardian Uninstall (Run as Admin).bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Lib.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Lib.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/custom/api-requests.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/custom/api-requests.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/custom/viewmodels.js
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/custom/viewmodels.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/bootstrap.min.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/bootstrap.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery-3.2.1.min.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery-3.2.1.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery.form.min.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/jquery.form.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/knockout-min.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/knockout-min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/knockout.mapping.min.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/Content/dep/knockout.mapping.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/HidCerberus.Srv.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/HidCerberus.Srv.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/index.html
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Drivers/HIDGuardian/_drivers/HidGuardian/HidGuardian.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
Drivers/HIDGuardian/_drivers/HidGuardian/WdfCoinstaller01009.dll
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
Drivers/HIDGuardian/_drivers/HidGuardian/WdfCoinstaller01009.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
Drivers/HIDGuardian/_drivers/devcon.exe
Resource
win10v2004-20240802-en
General
-
Target
Drivers/HIDGuardian/_drivers/HidCerberus.Srv/index.html
-
Size
5KB
-
MD5
994a3b3da98cdcb91ac43b3e4aa21efd
-
SHA1
6a0cf0d5aba9f4677040803c8e0fab552a36a9ea
-
SHA256
4f7fe250355b5f110c29f596154f8b5477bc16a59988271d2f8a753f20871903
-
SHA512
754d29ae97b7db5541763f1d4c9e30cadcd948cd8926a94344a02453eb69a6da79f7b4c887ce7dec9ff0ec1a518a6776db8cf9f57fd46431056fc9eea8889d75
-
SSDEEP
48:V3VkmtmqN+Cto7myprroWQb/cQvbM6fXR58pjeLuPQbitM1TkLCHE7NQNeoGwbAM:1vmmyQjcQvbNJpLVsifHE7NChASzpV
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\Drivers\HIDGuardian\_drivers\HidCerberus.Srv\index.html1⤵PID:4768
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=11 --field-trial-handle=4120,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:11⤵PID:1784
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=10 --field-trial-handle=4180,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:11⤵PID:4156
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --field-trial-handle=5020,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:11⤵PID:732
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5572,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:81⤵PID:3060
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --field-trial-handle=5580,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:81⤵PID:224
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=6032,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:11⤵PID:2980
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --field-trial-handle=5772,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:81⤵PID:184
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=6484,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:81⤵PID:1316