Overview
overview
8Static
static
3Informaal ...ro.bat
windows7-x64
1Informaal ...ro.bat
windows10-2004-x64
7Informaal ...er.bat
windows7-x64
8Informaal ...er.bat
windows10-2004-x64
8Informaal ...64.exe
windows7-x64
1Informaal ...64.exe
windows10-2004-x64
1Informaal ...20.dll
windows7-x64
1Informaal ...20.dll
windows10-2004-x64
1Informaal ...es.dll
windows7-x64
1Informaal ...es.dll
windows10-2004-x64
1Informaal ...ni.dll
windows7-x64
1Informaal ...ni.dll
windows10-2004-x64
1Informaal ...bc.dll
windows7-x64
1Informaal ...bc.dll
windows10-2004-x64
1Informaal ...fb.dll
windows7-x64
1Informaal ...fb.dll
windows10-2004-x64
1Informaal ...tr.dll
windows7-x64
1Informaal ...tr.dll
windows10-2004-x64
1Informaal ...cb.dll
windows7-x64
1Informaal ...cb.dll
windows10-2004-x64
1Informaal ...sh.dll
windows7-x64
1Informaal ...sh.dll
windows10-2004-x64
1Informaal ...cb.dll
windows7-x64
1Informaal ...cb.dll
windows10-2004-x64
1Informaal ...fb.dll
windows7-x64
1Informaal ...fb.dll
windows10-2004-x64
1Informaal ...2s.dll
windows7-x64
1Informaal ...2s.dll
windows10-2004-x64
1Informaal ...D5.dll
windows7-x64
1Informaal ...D5.dll
windows10-2004-x64
1Informaal ...A1.dll
windows7-x64
1Informaal ...A1.dll
windows10-2004-x64
1Analysis
-
max time kernel
129s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29/09/2024, 05:33
Static task
static1
Behavioral task
behavioral1
Sample
Informaal Macro/InformaalFrog Anime Vanguard Macro.bat
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Informaal Macro/InformaalFrog Anime Vanguard Macro.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Informaal Macro/defender.bat
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Informaal Macro/defender.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Informaal Macro/dist/AutoHotkey64.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Informaal Macro/dist/AutoHotkey64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Informaal Macro/dist/Cryptodome/Cipher/_Salsa20.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Informaal Macro/dist/Cryptodome/Cipher/_Salsa20.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_aes.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_aes.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_aesni.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_aesni.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_cbc.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_cbc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_cfb.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_cfb.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_ctr.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_ctr.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_ecb.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_ecb.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_eksblowfish.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_eksblowfish.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_ocb.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_ocb.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_ofb.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Informaal Macro/dist/Cryptodome/Cipher/_raw_ofb.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Informaal Macro/dist/Cryptodome/Hash/_BLAKE2s.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Informaal Macro/dist/Cryptodome/Hash/_BLAKE2s.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Informaal Macro/dist/Cryptodome/Hash/_MD5.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Informaal Macro/dist/Cryptodome/Hash/_MD5.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Informaal Macro/dist/Cryptodome/Hash/_SHA1.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Informaal Macro/dist/Cryptodome/Hash/_SHA1.dll
Resource
win10v2004-20240802-en
General
-
Target
Informaal Macro/dist/Cryptodome/Cipher/_Salsa20.dll
-
Size
13KB
-
MD5
b736ee946d6cf2be817dc71d8cd5ab51
-
SHA1
448f22d6c3ec66d576ab9773a6266a965d31008d
-
SHA256
ddfa617ccf867e40d83a7938c6a0f3a5bd18c265b18b463c32ab7585c39a5c7e
-
SHA512
5788890eeebd97ec51a6e9ab4745483b988cfa5bf31695b76651824cfe1cdcdca5c355d24cb8cd4ec353ed7e5c9de4818c084204e0ac0b9e41dc967291874a21
-
SSDEEP
192:2F/1nb2eqCQtkluknuz4ceS4QDuIA7cqgYvEP:M2P6luLtn4QDLmgYvEP
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Informaal Macro\dist\Cryptodome\Cipher\_Salsa20.dll",#11⤵PID:408
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4264,i,4174666705242427184,7333705955694532165,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:81⤵PID:440