Overview
overview
10Static
static
10SilverBulletPro.exe
windows7-x64
7SilverBulletPro.exe
windows10-2004-x64
8errorlog.exe
windows7-x64
1errorlog.exe
windows10-2004-x64
1host.exe
windows7-x64
7host.exe
windows10-2004-x64
8x64/expections.exe
windows7-x64
7x64/expections.exe
windows10-2004-x64
8x64/lepton....0.dll
windows7-x64
1x64/lepton....0.dll
windows10-2004-x64
1x64/runtime.exe
windows7-x64
7x64/runtime.exe
windows10-2004-x64
7x64/tesseract53.dll
windows7-x64
1x64/tesseract53.dll
windows10-2004-x64
1Analysis
-
max time kernel
15s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
04-10-2024 11:52
Behavioral task
behavioral1
Sample
SilverBulletPro.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
SilverBulletPro.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
errorlog.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
errorlog.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
host.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
host.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
x64/expections.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
x64/expections.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
x64/leptonica-1.82.0.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
x64/leptonica-1.82.0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
x64/runtime.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
x64/runtime.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
x64/tesseract53.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
x64/tesseract53.dll
Resource
win10v2004-20240802-en
General
-
Target
x64/runtime.exe
-
Size
13.2MB
-
MD5
a4fd5040db03f0c04306ab7824320269
-
SHA1
32a4e4f1c7d0c0fe1be81bddecafeb2303a8227b
-
SHA256
52c7c34bcc42c907a275f706cde7c03eab24287f3aec081f0bd88780de131e7c
-
SHA512
ca00c6c4cbd5dab079ce204f9adabba1c748869d79a172bdf8aa434aa97de4c3627273208ecd970159eae432e5e3bf69e7e860a9cae07e5a7918c98cd1d0e9c2
-
SSDEEP
393216:AIEkZgf8iq1+TtIiFGvvB5IjWqn6eCz1lypRXiWCoaa:rRbiq1QtIZX3ILn6esyaVoaa
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 3000 runtime.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3044 wrote to memory of 3000 3044 runtime.exe 30 PID 3044 wrote to memory of 3000 3044 runtime.exe 30 PID 3044 wrote to memory of 3000 3044 runtime.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.7MB
MD5550288a078dffc3430c08da888e70810
SHA101b1d31f37fb3fd81d893cc5e4a258e976f5884f
SHA256789a42ac160cef98f8925cb347473eeeb4e70f5513242e7faba5139ba06edf2d
SHA5127244432fc3716f7ef27630d4e8fbc8180a2542aa97a01d44dca260ab43966dd8ac98b6023400b0478a4809aace1a128f1f4d6e544f2e591a5b436fd4c8a9d723