Overview

overview

6

Static

static

3

56fc58cea8...18.exe

windows7-x64

3

56fc58cea8...18.exe

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDI...ck.dll

windows7-x64

3

$PLUGINSDI...ck.dll

windows10-2004-x64

3

C:/WINDOWS...op.sys

windows7-x64

1

C:/WINDOWS...op.sys

windows10-2004-x64

1

C:/WINDOWS...ll.exe

windows7-x64

C:/WINDOWS...ll.exe

windows10-2004-x64

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ck.dll

windows7-x64

3

$PLUGINSDI...ck.dll

windows10-2004-x64

3

OhOhPopup.dll

windows7-x64

6

OhOhPopup.dll

windows10-2004-x64

6

Analysis

  • max time kernel
    141s
  • max time network
    109s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/10/2024, 10:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    C:/WINDOWS/system32/drivers/showpop.sys

  • Size

    11KB

  • MD5

    4f7f36bd2f4d6eaa7c1ffc5d76cf93dd

  • SHA1

    9232c26f2e7dbb70a7a4ed20c24a7be1ba29ee60

  • SHA256

    13a10489a9c67602b328b0d7711510b170f8a7a1957a209e389501f432a79796

  • SHA512

    4b439104c52c4c55c991c08df1270f6956eb7d36fd83b20185016f5abbe299033406385c69fce3658902875ba6e28b58c60f58378003d4ff068bcec3cf93a27c

  • SSDEEP

    192:MmBMwUm02xJR/FG3fNNkYTIAo5hvlDfhicijDiFipFah4sYA+KUjJsWF:MmawUmdgfNNkOIRvhIdj2UpFaWsbuJsq

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\WINDOWS\system32\drivers\showpop.sys
    1⤵
      PID:4364
      • C:\WINDOWS\system32\drivers\showpop.sys
        C:\WINDOWS\system32\drivers\showpop.sys
        2⤵
          PID:2108

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2108-0-0x0000000000010000-0x0000000000017000-memory.dmp

        Filesize

        28KB

        Download