Overview
overview
10Static
static
10Howlis executor.zip
windows7-x64
7Howlis executor.zip
windows11-21h2-x64
8ForlornApi.dll
windows7-x64
1ForlornApi.dll
windows11-21h2-x64
1Howlis executor.exe
windows7-x64
7Howlis executor.exe
windows11-21h2-x64
8��+�*ʼn.pyc
windows7-x64
��+�*ʼn.pyc
windows11-21h2-x64
bin/Xeno.dll
windows7-x64
1bin/Xeno.dll
windows11-21h2-x64
7bin/libcry...64.dll
windows7-x64
1bin/libcry...64.dll
windows11-21h2-x64
1bin/libssl-3-x64.dll
windows7-x64
1bin/libssl-3-x64.dll
windows11-21h2-x64
1bin/xxhash.dll
windows7-x64
1bin/xxhash.dll
windows11-21h2-x64
1bin/zstd.dll
windows7-x64
1bin/zstd.dll
windows11-21h2-x64
1cver.txt
windows7-x64
1cver.txt
windows11-21h2-x64
8cxapis.dll
windows7-x64
1cxapis.dll
windows11-21h2-x64
1runtimes/w...er.dll
windows7-x64
1runtimes/w...er.dll
windows11-21h2-x64
1Analysis
-
max time kernel
1563s -
max time network
1564s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
16-12-2024 21:17
Behavioral task
behavioral1
Sample
Howlis executor.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Howlis executor.zip
Resource
win11-20241023-en
Behavioral task
behavioral3
Sample
ForlornApi.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
ForlornApi.dll
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
Howlis executor.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Howlis executor.exe
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
��+�*ʼn.pyc
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
��+�*ʼn.pyc
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
bin/Xeno.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
bin/Xeno.dll
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
bin/libcrypto-3-x64.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
bin/libcrypto-3-x64.dll
Resource
win11-20241023-en
Behavioral task
behavioral13
Sample
bin/libssl-3-x64.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
bin/libssl-3-x64.dll
Resource
win11-20241007-en
Behavioral task
behavioral15
Sample
bin/xxhash.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
bin/xxhash.dll
Resource
win11-20241007-en
Behavioral task
behavioral17
Sample
bin/zstd.dll
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
bin/zstd.dll
Resource
win11-20241007-en
Behavioral task
behavioral19
Sample
cver.txt
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
cver.txt
Resource
win11-20241007-en
Behavioral task
behavioral21
Sample
cxapis.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
cxapis.dll
Resource
win11-20241023-en
Behavioral task
behavioral23
Sample
runtimes/win-x64/native/WebView2Loader.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
runtimes/win-x64/native/WebView2Loader.dll
Resource
win11-20241007-en
General
-
Target
bin/xxhash.dll
-
Size
46KB
-
MD5
70c514826d9428f184d27f0c8f397404
-
SHA1
e6b0b1a396de9913004d9bcaa230972686416bb6
-
SHA256
aff59e91d222b75b3e3ac789baba9e24eff99796261ae5e887ef9e3c28bb3d64
-
SHA512
168c63cbb54865ca42a884fd974291bcadd9dd8cf8bc1980148214e84498af42a590cb3d3a394765ee0b7d2e337fab6e85ff4f85d9ced97b92b540152202a0a6
-
SSDEEP
768:tziPp7yW4k3QDn24NuDUSu0MKQVMNKuxYAuogba4Mk3Q18swN1WQ8hi6U:tziR74kgDn2rDRuIrN5mAvgbTg18DN1z
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2900 wrote to memory of 3012 2900 rundll32.exe 28 PID 2900 wrote to memory of 3012 2900 rundll32.exe 28 PID 2900 wrote to memory of 3012 2900 rundll32.exe 28