Overview
overview
10Static
static
3$77-Example.exe
windows7-x64
1$77-Example.exe
windows10-2004-x64
1BytecodeApi.UI.dll
windows7-x64
1BytecodeApi.UI.dll
windows10-2004-x64
1BytecodeApi.dll
windows7-x64
1BytecodeApi.dll
windows10-2004-x64
1Helper32.dll
windows7-x64
3Helper32.dll
windows10-2004-x64
3Helper64.dll
windows7-x64
1Helper64.dll
windows10-2004-x64
1Install.exe
windows7-x64
10Install.exe
windows10-2004-x64
10TestConsole.exe
windows7-x64
3TestConsole.exe
windows10-2004-x64
3r77-x64.dll
windows7-x64
1r77-x64.dll
windows10-2004-x64
1r77-x86.dll
windows7-x64
3r77-x86.dll
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29/10/2024, 00:10
Static task
static1
Behavioral task
behavioral1
Sample
$77-Example.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
$77-Example.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
BytecodeApi.UI.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
BytecodeApi.UI.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
BytecodeApi.dll
Resource
win7-20241023-en
Behavioral task
behavioral6
Sample
BytecodeApi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Helper32.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Helper32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Helper64.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Helper64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Install.exe
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
Install.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
TestConsole.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
TestConsole.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
r77-x64.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
r77-x64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
r77-x86.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
r77-x86.dll
Resource
win10v2004-20241007-en
General
-
Target
TestConsole.exe
-
Size
262KB
-
MD5
1f195793c2802ebeddcdb1b13f23476e
-
SHA1
216efe9bcd245350baf37d5bc3b5073cdb5f2e31
-
SHA256
cae860044d6969b1e7540c97eb7371e4df1be08b1caaab64424425aa7a23a6ee
-
SHA512
4f6ec7e606d6e12a17083fc6aa21ca3f5d523d7ab6ea41d939708bff0f8ca540e442789b658c239c089f20d0ce40fdac1426d64757859e166a96dd9ed499eece
-
SSDEEP
6144:VybkRvlY/lWqgYiwRVi8O2JQ2366PvbfhssEA:GkRsq2JQ23PPvzhD9
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe 2728 TestConsole.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2728 TestConsole.exe Token: SeDebugPrivilege 2728 TestConsole.exe