Overview
overview
8Static
static
3KospArsivi...nt.exe
windows7-x64
7KospArsivi...nt.exe
windows10-2004-x64
7KospArsivi...om.exe
windows7-x64
7KospArsivi...om.exe
windows10-2004-x64
7procexp.chm
windows7-x64
1procexp.chm
windows10-2004-x64
1procexp.exe
windows7-x64
8procexp.exe
windows10-2004-x64
8KospArsivi...t1.exe
windows7-x64
7KospArsivi...t1.exe
windows10-2004-x64
7KospArsivi...or.exe
windows7-x64
7KospArsivi...or.exe
windows10-2004-x64
7KospArsivi...t8.dll
windows7-x64
3KospArsivi...t8.dll
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
17/10/2024, 21:37
Static task
static1
Behavioral task
behavioral1
Sample
KospArsivi_seriMinor_Combo_MultiKo_/1733 Multi Client/MultiClient.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
KospArsivi_seriMinor_Combo_MultiKo_/1733 Multi Client/MultiClient.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
KospArsivi_seriMinor_Combo_MultiKo_/Game Hacker v1733/Koxp Frmstar.com.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
KospArsivi_seriMinor_Combo_MultiKo_/Game Hacker v1733/Koxp Frmstar.com.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
procexp.chm
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
procexp.chm
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
procexp.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
procexp.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
KospArsivi_seriMinor_Combo_MultiKo_/Kobot 1733/Project1.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
KospArsivi_seriMinor_Combo_MultiKo_/Kobot 1733/Project1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
KospArsivi_seriMinor_Combo_MultiKo_/combo-seri minor/Seri Minor.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
KospArsivi_seriMinor_Combo_MultiKo_/combo-seri minor/Seri Minor.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
KospArsivi_seriMinor_Combo_MultiKo_/combo-seri minor/dinput8.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
KospArsivi_seriMinor_Combo_MultiKo_/combo-seri minor/dinput8.dll
Resource
win10v2004-20241007-en
General
-
Target
procexp.chm
-
Size
70KB
-
MD5
574f15380633a17ec77515272424610a
-
SHA1
a77a9b92ab592c6e3155fb6dae9114290456ea6f
-
SHA256
e7f6d9613ae2e3513278412c0551f9b2a9b25d81b394a17ef055b244a9cb66c2
-
SHA512
aad31bb777f4659d90b59c439457bb36b8ac59e6681d5d30edb879f9d789ef366524b8c97d5e349d41e2c8cfab9d0ef1f6a265852e73822a760af9356d754947
-
SSDEEP
1536:Bu0s1LZaDT/EeEWrHUyGZ6tFiemRjMqIt2cp/7b3Tm:M1aX/vHt3tlmBMqItR7zTm
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3648 hh.exe 3648 hh.exe