Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19/11/2024, 13:58
Static task
static1
Behavioral task
behavioral1
Sample
508f5916841df09668253b972d7b702c3f67fd2823305716160d15d0056dab01.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
508f5916841df09668253b972d7b702c3f67fd2823305716160d15d0056dab01.dll
Resource
win10v2004-20241007-en
General
-
Target
508f5916841df09668253b972d7b702c3f67fd2823305716160d15d0056dab01.dll
-
Size
621KB
-
MD5
2a8ddd5b1d25b0fa446408755c70b55e
-
SHA1
760eb30fee1aa1fde7f46a02f671413a7b7803d6
-
SHA256
508f5916841df09668253b972d7b702c3f67fd2823305716160d15d0056dab01
-
SHA512
fd6a0e8ac5b9cb0167fbcc04b9f77af24d524ccced2bae52208b3aa0008f9ad9982cd3f765b15c6a33380b421af3f171884a9596a6fcd29e07d1984b0725ef9e
-
SSDEEP
3072:JFCFW+xSbvFkPnnn8NGHWb+ZZZYdPEBGvqdcsAghV0ezVRxaz0bNIESdtBw56ft2:JFMsFXCZZZJkwWf+qVV2SICB7W
Malware Config
Signatures
-
Modifies registry class 13 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829}\TypeLib regsvr32.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DataLinks\ = "DataLinks" regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{2206CEB0-19C1-11D1-89E0-00C04FD7A829}\1.0\0\win64 regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{2206CEB0-19C1-11D1-89E0-00C04FD7A829}\1.0 regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\Version regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829} regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829} regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829}\Version regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{2206CEB0-19C1-11D1-89E0-00C04FD7A829} regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{2206CEB0-19C1-11D1-89E0-00C04FD7A829}\1.0\0 regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\TypeLib regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID regsvr32.exe