Overview
overview
8Static
static
3DriverEasy...00.rar
windows10-ltsc_2021-x64
1App/AppInf...om.nsh
windows10-ltsc_2021-x64
3App/AppInf...le.ini
windows10-ltsc_2021-x64
1App/AppInf...on.ico
windows10-ltsc_2021-x64
3App/AppInf...fo.ini
windows10-ltsc_2021-x64
1App/Defaul...se.xml
windows10-ltsc_2021-x64
3App/Defaul...gs.xml
windows10-ltsc_2021-x64
3App/Driver...7z.dll
windows10-ltsc_2021-x64
1App/Driver...86.dll
windows10-ltsc_2021-x64
3App/Driver...ve.dll
windows10-ltsc_2021-x64
3App/Driver...64.dll
windows10-ltsc_2021-x64
1App/Driver...fo.dll
windows10-ltsc_2021-x64
3App/Driver...64.dll
windows10-ltsc_2021-x64
1App/Driver...sy.exe
windows10-ltsc_2021-x64
4App/Driver...xe.xml
windows10-ltsc_2021-x64
3App/Driver...re.dll
windows10-ltsc_2021-x64
1App/Driver...on.exe
windows10-ltsc_2021-x64
5App/Driver...ns.dll
windows10-ltsc_2021-x64
1App/Driver...on.dll
windows10-ltsc_2021-x64
1App/Driver...rp.dll
windows10-ltsc_2021-x64
1App/Driver...or.dll
windows10-ltsc_2021-x64
1App/Driver...on.dll
windows10-ltsc_2021-x64
1App/Driver...le.dll
windows10-ltsc_2021-x64
1App/Driver...ns.dll
windows10-ltsc_2021-x64
1App/Driver...ay.dll
windows10-ltsc_2021-x64
1App/Driver...Ui.dll
windows10-ltsc_2021-x64
1App/Driver...et.dll
windows10-ltsc_2021-x64
1DriverEasy...le.exe
windows10-ltsc_2021-x64
8Analysis
- max time kernel
149s - max time network
152s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-fr - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-frlocale:fr-fros:windows10-ltsc_2021-x64systemwindows - submitted
06/09/2026, 23:54
Static task
static1
Behavioral task
behavioral1
Sample
DriverEasyPortable_7.1.3.5200.rar
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral2
Sample
App/AppInfo/Launcher/Custom.nsh
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral3
Sample
App/AppInfo/Launcher/DriverEasyPortable.ini
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral4
Sample
App/AppInfo/appicon.ico
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral5
Sample
App/AppInfo/appinfo.ini
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral6
Sample
App/DefaultData/Easeware/DriverEasy/license.xml
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral7
Sample
App/DefaultData/Easeware/DriverEasy/settings.xml
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral8
Sample
App/DriverEasy/Dependency/7z.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral9
Sample
App/DriverEasy/Dependency/7z86.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral10
Sample
App/DriverEasy/Dependency/DeNative.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral11
Sample
App/DriverEasy/Dependency/DeNative64.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral12
Sample
App/DriverEasy/Dependency/HardwareInfo.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral13
Sample
App/DriverEasy/Dependency/HardwareInfo64.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral14
Sample
App/DriverEasy/DriverEasy.exe
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral15
Sample
App/DriverEasy/DriverEasy.exe.xml
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral16
Sample
App/DriverEasy/Easeware.Driver.Core.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral17
Sample
App/DriverEasy/Easeware.Driver.UI.Notification.exe
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral18
Sample
App/DriverEasy/Microsoft.Toolkit.Uwp.Notifications.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral19
Sample
App/DriverEasy/Newtonsoft.Json.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral20
Sample
App/DriverEasy/SevenZipSharp.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral21
Sample
App/DriverEasy/SimpleInjector.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral22
Sample
App/DriverEasy/System.Management.Automation.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral23
Sample
App/DriverEasy/System.ValueTuple.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral24
Sample
App/DriverEasy/Wpf.Ui.Abstractions.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral25
Sample
App/DriverEasy/Wpf.Ui.Tray.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral26
Sample
App/DriverEasy/Wpf.Ui.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral27
Sample
App/DriverEasy/log4net.dll
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral28
Sample
DriverEasyPortable.exe
Resource
win10ltsc2021-20260513-fr
General
- Target App/DriverEasy/Dependency/7z86.dll
- Size 1.0MB
- Sample260906-3x6afssyet
- SHA256 604c582f686303f7d7bc695b56daf2437265fe991fe826b90cfe0ad098c66aa5
- MD5 2123d1fdcb898ea153bb4952fe69b9bb
- SHA1 604c225564685374fb4ac7587b81e0703fa1fc1a
- SHA512 9a5aee1e8e7550e28e13082a4d3c2337b7139390815e9b4a8c59954966abbcd10aa5f0f165aa73a2e63b4e1ed8436604a25b3ce206ade0603b63c27f331119d2
- SSDEEP 24576:t18U0fpB2dO9SFryQ3LZ/grny6erPgDJT66Xq3oPv:t18Uu0k9SFryQ3LZ/grnyZbAJLXqYn
- TLSH T181357D15F7F1C478D98A85308A29ABB540F8F71FCA10A8C767C0BE6E6F32CD5D225949
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4936 1216 WerFault.exe 82 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4468 wrote to memory of 1216 4468 rundll32.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\App\DriverEasy\Dependency\7z86.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4468 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\App\DriverEasy\Dependency\7z86.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:1216 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1216 -s 6003⤵
- Program crash
PID:4936
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1216 -ip 12161⤵PID:6000