Overview
overview
10Static
static
10Hotmail Checker.rar
windows7-x64
1Hotmail Checker.rar
windows10-2004-x64
1Data/Modul...io.dll
windows7-x64
1Data/Modul...io.dll
windows10-2004-x64
1Data/Modul...pi.dll
windows7-x64
1Data/Modul...pi.dll
windows10-2004-x64
1Data/Modules/Jint.dll
windows7-x64
1Data/Modules/Jint.dll
windows10-2004-x64
1Data/Modul...et.dll
windows7-x64
1Data/Modul...et.dll
windows10-2004-x64
1Data/Modul...on.dll
windows7-x64
1Data/Modul...on.dll
windows10-2004-x64
1Data/Modul...um.dll
windows7-x64
1Data/Modul...um.dll
windows10-2004-x64
1Data/Modul...he.exe
windows7-x64
1Data/Modul...he.exe
windows10-2004-x64
1Data/Modul...e1.exe
windows7-x64
10Data/Modul...e1.exe
windows10-2004-x64
10Data/Modul...xe.xml
windows7-x64
3Data/Modul...xe.xml
windows10-2004-x64
1Data/Modul...e1.pdb
windows7-x64
3Data/Modul...e1.pdb
windows10-2004-x64
3Data/Modul...s.json
windows7-x64
3Data/Modul...s.json
windows10-2004-x64
3Jint.dll
windows7-x64
1Jint.dll
windows10-2004-x64
1Start Checker.bat
windows7-x64
10Start Checker.bat
windows10-2004-x64
10settings.json
windows7-x64
3settings.json
windows10-2004-x64
3Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2024 16:42
Behavioral task
behavioral1
Sample
Hotmail Checker.rar
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Hotmail Checker.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Data/Modules/AudioSwitcher.AudioApi.CoreAudio.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Data/Modules/AudioSwitcher.AudioApi.CoreAudio.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Data/Modules/AudioSwitcher.AudioApi.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Data/Modules/AudioSwitcher.AudioApi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Data/Modules/Jint.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Data/Modules/Jint.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Data/Modules/Leaf.xNet.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Data/Modules/Leaf.xNet.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Data/Modules/Newtonsoft.Json.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Data/Modules/Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Data/Modules/Sodium.dll
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
Data/Modules/Sodium.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Data/Modules/porsche.exe
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
Data/Modules/porsche.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Data/Modules/porsche1.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Data/Modules/porsche1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Data/Modules/porsche1.exe.xml
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Data/Modules/porsche1.exe.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Data/Modules/porsche1.pdb
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Data/Modules/porsche1.pdb
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Data/Modules/settings.json
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Data/Modules/settings.json
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Jint.dll
Resource
win7-20241023-en
Behavioral task
behavioral26
Sample
Jint.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Start Checker.bat
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Start Checker.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
settings.json
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
settings.json
Resource
win10v2004-20241007-en
General
-
Target
Data/Modules/porsche1.exe.xml
-
Size
163B
-
MD5
9a3d99ab612161dfe2116f5939b8bc05
-
SHA1
a0f4570011c4e5add32b247889eb1036c9f1cfa1
-
SHA256
97f54f7cda9454d4083f240408cd315a54c99be0d770f3a77baa18b00a410c8a
-
SHA512
4701a79ae88d0164c87930d35fc3e2ebab016e6bb7ea794f90b67268782b298ab65288b8364afcaadb5c4ce6b22630179426f5a53da60dde81cb6c90a88d8590
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Data\Modules\porsche1.exe.xml"1⤵PID:4460