Overview
overview
7Static
static
5ae28322e08...eN.exe
windows7-x64
7ae28322e08...eN.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3DomaIQ.exe
windows7-x64
3DomaIQ.exe
windows10-2004-x64
1DomaIQ10.exe
windows7-x64
3DomaIQ10.exe
windows10-2004-x64
1config.dll
windows7-x64
1config.dll
windows10-2004-x64
1routes.dll
windows7-x64
1routes.dll
windows10-2004-x64
1setup__120.exe
windows7-x64
5setup__120.exe
windows10-2004-x64
5Analysis
-
max time kernel
102s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2024 18:05
Behavioral task
behavioral1
Sample
ae28322e0824f19bdab5fd824142a22ea5f4a27d8f695a2ce0bf6b642b55f84eN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ae28322e0824f19bdab5fd824142a22ea5f4a27d8f695a2ce0bf6b642b55f84eN.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
DomaIQ.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
DomaIQ.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
DomaIQ10.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
DomaIQ10.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
config.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
config.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
routes.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
routes.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
setup__120.exe
Resource
win7-20240903-en
General
-
Target
DomaIQ.exe
-
Size
211KB
-
MD5
27d5e5a09fa180c3238ed33bc7cf993b
-
SHA1
355f72845fcf414001808a8491e8dee3b8863cfb
-
SHA256
235602a88f5602010bc33f5b05671bfad3e2599d96273fc2c361357507ad08bc
-
SHA512
036a7620212f83663ae0c7498501fdba1609bf68488b735ac30fd986ed6c9017c132d562798e9bbcc911945601ea17d64e00020331ba2ef68cd5251ec40ad04b
-
SSDEEP
6144:yX8M6vMCNntOkTsCtIwk3r2G7n58w4yw:dve7n3w
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2628 DomaIQ.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2628 DomaIQ.exe 2628 DomaIQ.exe