Overview
overview
10Static
static
10CefSharp.exe
windows7-x64
7CefSharp.exe
windows10-2004-x64
7FastColore...ox.dll
windows7-x64
1FastColore...ox.dll
windows10-2004-x64
1Fixer.bat
windows7-x64
1Fixer.bat
windows10-2004-x64
1GMap.NET.Core.dll
windows7-x64
1GMap.NET.Core.dll
windows10-2004-x64
1GMap.NET.W...ms.dll
windows7-x64
1GMap.NET.W...ms.dll
windows10-2004-x64
1Guna.UI2.dll
windows7-x64
1Guna.UI2.dll
windows10-2004-x64
1IconExtractor.dll
windows7-x64
1IconExtractor.dll
windows10-2004-x64
1NAudio.dll
windows7-x64
1NAudio.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Plugins\Ac...ws.dll
windows7-x64
1Plugins\Ac...ws.dll
windows10-2004-x64
1Plugins\Chat.dll
windows7-x64
1Plugins\Chat.dll
windows10-2004-x64
1Plugins\Chromium.dll
windows7-x64
1Plugins\Chromium.dll
windows10-2004-x64
1Plugins\Clipboard.dll
windows7-x64
1Plugins\Clipboard.dll
windows10-2004-x64
1Plugins\Cm...ss.dll
windows7-x64
1Plugins\Cm...ss.dll
windows10-2004-x64
1Plugins\Fi...er.dll
windows7-x64
1Plugins\Fi...er.dll
windows10-2004-x64
1Plugins\Fi...er.dll
windows7-x64
1Plugins\Fi...er.dll
windows10-2004-x64
1Analysis
-
max time kernel
92s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2024 03:29
Behavioral task
behavioral1
Sample
CefSharp.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
CefSharp.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
FastColoredTextBox.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
FastColoredTextBox.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Fixer.bat
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Fixer.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
GMap.NET.Core.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
GMap.NET.Core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
GMap.NET.WindowsForms.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
GMap.NET.WindowsForms.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Guna.UI2.dll
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
Guna.UI2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
IconExtractor.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
IconExtractor.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
NAudio.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
NAudio.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Newtonsoft.Json.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Plugins\ActiveWindows.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Plugins\ActiveWindows.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Plugins\Chat.dll
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
Plugins\Chat.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Plugins\Chromium.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Plugins\Chromium.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Plugins\Clipboard.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Plugins\Clipboard.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Plugins\Cmstp-Bypass.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Plugins\Cmstp-Bypass.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Plugins\FileManager.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Plugins\FileManager.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Plugins\FilesSearcher.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Plugins\FilesSearcher.dll
Resource
win10v2004-20241007-en
General
-
Target
Plugins\Clipboard.dll
-
Size
14KB
-
MD5
831eb0de839fc13de0abab64fe1e06e7
-
SHA1
53aad63a8b6fc9e35c814c55be9992abc92a1b54
-
SHA256
e31a1c2b1baa2aa2c36cabe3da17cd767c8fec4c206bd506e889341e5e0fa959
-
SHA512
2f61bcf972671d96e036b3c99546cd01e067bef15751a87c00ba6d656decb6b69a628415e5363e650b55610cf9f237585ada7ce51523e6efc0e27d7338966bee
-
SSDEEP
192:xh23MTInqHX7qRlrZk1/X7eOFXgNTer149iY6IW1mX/YWMqS7RSLOIU:cTWElV0/X7eUSTe5Wi2X/ShIU
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request88.210.23.2.in-addr.arpaIN PTRResponse88.210.23.2.in-addr.arpaIN PTRa2-23-210-88deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request241.150.49.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request0.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request228.249.119.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request212.20.149.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request198.187.3.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request107.12.20.2.in-addr.arpaIN PTRResponse107.12.20.2.in-addr.arpaIN PTRa2-20-12-107deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request43.229.111.52.in-addr.arpaIN PTRResponse
-
70 B 133 B 1 1
DNS Request
88.210.23.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
241.150.49.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
0.159.190.20.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.249.119.40.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
212.20.149.52.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
198.187.3.20.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
107.12.20.2.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
43.229.111.52.in-addr.arpa