Overview
overview
7Static
static
7Cadt.dll
windows7-x64
5Cadt.dll
windows10-2004-x64
5DisView.exe
windows7-x64
5DisView.exe
windows10-2004-x64
5LZNT1Decompress.dll
windows7-x64
3LZNT1Decompress.dll
windows10-2004-x64
3MalHost-Setup.exe
windows7-x64
3MalHost-Setup.exe
windows10-2004-x64
3OfficeMalScanner.exe
windows7-x64
5OfficeMalScanner.exe
windows10-2004-x64
5RTFScan.exe
windows7-x64
5RTFScan.exe
windows10-2004-x64
5Unzipper.dll
windows7-x64
5Unzipper.dll
windows10-2004-x64
5Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
11/10/2024, 20:46
Behavioral task
behavioral1
Sample
Cadt.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Cadt.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
DisView.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
DisView.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
LZNT1Decompress.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
LZNT1Decompress.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
MalHost-Setup.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
MalHost-Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
OfficeMalScanner.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
OfficeMalScanner.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
RTFScan.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
RTFScan.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Unzipper.dll
Resource
win7-20240903-en
General
-
Target
OfficeMalScanner.exe
-
Size
122KB
-
MD5
e8e65e62170fae40391501a9ae2f64b7
-
SHA1
3badac9b841c90a9398102f67914bcb595374a6c
-
SHA256
6f74145fe6fba3cb4f4d113ba2103eb88cd3c0ada37f868a5fd08e4b7d9ed632
-
SHA512
a8247439e61729f1ded22d7ff8bb76599c55492e53fbbf9e2f3e9d8706cbb35f64da084a09f7282ef3440813a19ec6dfdb8adde6653f6193f454aaa12fd485f1
-
SSDEEP
1536:vZd3G3GG3SUNvSObKnxIt5ZsvQkvHOMH3n3vZAJtPuh5Ctqo:v/ARNvSaZsHOMH3n3vZAJtPuh5C3
Malware Config
Signatures
-
resource yara_rule behavioral9/memory/2888-0-0x00000000001F0000-0x0000000000202000-memory.dmp upx behavioral9/memory/2888-2-0x00000000001F0000-0x0000000000202000-memory.dmp upx