Overview

overview

3

Static

static

3

WindowsHos...5).exe

windows10-2004-x64

1

WindowsHos...5).exe

windows11-ltsc_2024-x64

1

aforge.dll

windows10-2004-x64

1

aforge.dll

windows11-ltsc_2024-x64

1

aforge.vid...ow.dll

windows10-2004-x64

1

aforge.vid...ow.dll

windows11-ltsc_2024-x64

1

aforge.video.dll

windows10-2004-x64

1

aforge.video.dll

windows11-ltsc_2024-x64

1

costura.dll

windows10-2004-x64

1

costura.dll

windows11-ltsc_2024-x64

1

costura.pdb

windows10-2004-x64

3

costura.pdb

windows11-ltsc_2024-x64

3

microsoft....es.dll

windows10-2004-x64

1

microsoft....es.dll

windows11-ltsc_2024-x64

1

system.appcontext.dll

windows10-2004-x64

1

system.appcontext.dll

windows11-ltsc_2024-x64

1

system.console.dll

windows10-2004-x64

1

system.console.dll

windows11-ltsc_2024-x64

1

system.dia...ce.dll

windows10-2004-x64

1

system.dia...ce.dll

windows11-ltsc_2024-x64

1

system.dia...ng.dll

windows10-2004-x64

1

system.dia...ng.dll

windows11-ltsc_2024-x64

1

system.glo...rs.dll

windows10-2004-x64

1

system.glo...rs.dll

windows11-ltsc_2024-x64

1

system.io....on.dll

windows10-2004-x64

1

system.io....on.dll

windows11-ltsc_2024-x64

1

system.io....le.dll

windows10-2004-x64

1

system.io....le.dll

windows11-ltsc_2024-x64

1

system.io.dll

windows10-2004-x64

1

system.io.dll

windows11-ltsc_2024-x64

1

system.io....em.dll

windows10-2004-x64

1

system.io....em.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    WindowsHostManager(25).exe
  • Size 2.4MB
  • Sample260731-wnxtdsxgmb
  • SHA256 70610189a3398d312288226fc273dfbf0ab36e7b9fb6867e897de90ce2cdf348
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
execution

Malware Config

Targets

    • Target
      WindowsHostManager(25).exe
    • Size 2.4MB
    • SHA256 70610189a3398d312288226fc273dfbf0ab36e7b9fb6867e897de90ce2cdf348
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      aforge.dll
    • Size 17KB
    • SHA256 966a474060a8aca70c73ba09d0b6fe2353035961c7107b9003ef879c010ff8da
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      aforge.video.directshow.dll
    • Size 60KB
    • SHA256 666d44798d94eafa1ed21af79e9bc0293ffd96f863ab5d87f78bcee9ef9ffd6b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      aforge.video.dll
    • Size 20KB
    • SHA256 bafa6ed04ca2782270074127a0498dde022c2a9f4096c6bb2b8e3c08bb3d404d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      costura.dll
    • Size 4KB
    • SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      costura.pdb
    • Size 2KB
    • SHA256 89b13aa6efbc0b04745a00bb5fcf05b7a4e3537095bde974ed3490a9cf582d17
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      microsoft.win32.primitives.dll
    • Size 22KB
    • SHA256 e281d04d35118b7f3a2406014333e0581b74ea4b62f4f2388ad3ad8b32223c83
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      system.appcontext.dll
    • Size 19KB
    • SHA256 ea3a3003e10f44280074810934261b61a209c1ec1e9029b932742c853bde743e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      system.console.dll
    • Size 33KB
    • SHA256 083f8649db8063f231eb38af39a450cc4cb9c8d381804bd189bcf589eb9f0951
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      system.diagnostics.diagnosticsource.dll
    • Size 34KB
    • SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19behavioral20
    • Target
      system.diagnostics.tracing.dll
    • Size 36KB
    • SHA256 3a7f44e3b20a03cef6fe8b164a5c193d50bd30ee0aab26a7857d6b1944da64fd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral21behavioral22
    • Target
      system.globalization.calendars.dll
    • Size 22KB
    • SHA256 8e5a549c6c0339a5f88217e6b5b75b745a3c20fe97081b48062b684c4fa5d441
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral23behavioral24
    • Target
      system.io.compression.dll
    • Size 109KB
    • SHA256 b963eb95627b5f223e813fce8a53e6c9d72891714923de7263111473faebf3ef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral25behavioral26
    • Target
      system.io.compression.zipfile.dll
    • Size 24KB
    • SHA256 b5c12e9099643e2eda9b49edd0d98bdaed153c72a7e8e6235d8e78714402d16a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral27behavioral28
    • Target
      system.io.dll
    • Size 21KB
    • SHA256 965bb6510f6871c984a940b68ed24c6145e326e22e6fa66104d0a3bfccf9feea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral29behavioral30
    • Target
      system.io.filesystem.dll
    • Size 22KB
    • SHA256 2d917d520488b56673e74ac9dc610a2488ae70a7ebbbbff097c2e855ba1ef590
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks