9f83690b4ba738a40f8993645d5d02d3fda46041bf93a97cbde487fe09e3bb86 | Triage

Submit
Reports

Overview

overview

Static

static

NucleusApp.zip

windows7-x64

1

NucleusApp.zip

windows10-2004-x64

1

EasyHook.dll

windows7-x64

1

EasyHook.dll

windows10-2004-x64

1

EasyHook32.dll

windows7-x64

1

EasyHook32.dll

windows10-2004-x64

3

EasyHook32Svc.exe

windows7-x64

1

EasyHook32Svc.exe

windows10-2004-x64

1

EasyHook64.dll

windows7-x64

1

EasyHook64.dll

windows10-2004-x64

1

EasyHook64Svc.exe

windows7-x64

1

EasyHook64Svc.exe

windows10-2004-x64

1

EasyHookSvc.exe

windows7-x64

1

EasyHookSvc.exe

windows10-2004-x64

1

Ionic.Zip.Reduced.dll

windows7-x64

1

Ionic.Zip.Reduced.dll

windows10-2004-x64

1

Jint.dll

windows7-x64

1

Jint.dll

windows10-2004-x64

1

NAudio.dll

windows7-x64

1

NAudio.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Nucleus.Gaming.dll

windows7-x64

1

Nucleus.Gaming.dll

windows10-2004-x64

1

Nucleus.Hook32.dll

windows7-x64

3

Nucleus.Hook32.dll

windows10-2004-x64

3

Nucleus.Hook64.dll

windows7-x64

1

Nucleus.Hook64.dll

windows10-2004-x64

1

Nucleus.IJx64.exe

windows7-x64

1

Nucleus.IJx64.exe

windows10-2004-x64

1

Settings.ini

windows7-x64

1

Settings.ini

windows10-2004-x64

1

Analysis

max time kernel
111s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
17-06-2024 03:25

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

NucleusApp.zip

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NucleusApp.zip

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

EasyHook.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

EasyHook.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

EasyHook32.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

EasyHook32.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

EasyHook32Svc.exe

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

EasyHook32Svc.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

EasyHook64.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

EasyHook64.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

EasyHook64Svc.exe

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

EasyHook64Svc.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

EasyHookSvc.exe

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

EasyHookSvc.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Ionic.Zip.Reduced.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Ionic.Zip.Reduced.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Jint.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Jint.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

NAudio.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

NAudio.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Newtonsoft.Json.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Newtonsoft.Json.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Nucleus.Gaming.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Nucleus.Gaming.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Nucleus.Hook32.dll

Resource

win7-20240611-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

Nucleus.Hook32.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Nucleus.Hook64.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Nucleus.Hook64.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Nucleus.IJx64.exe

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Nucleus.IJx64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Settings.ini

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

Settings.ini

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

EasyHook64.dll
Size

346KB
MD5

f8243afb8dc94d1bd47f25e524847104
SHA1

30b33dacc2228f597d7480e0f26f9279a0f3aa8b
SHA256

04f967d77dba69d8369218a2ae316c210749f0b1279ac563d8d281dea7b8c6e4
SHA512

a07802ee45b03b1a446931b86b9c5ff7aed4fa6e60d68e76679f5f1edc7f9c46c2fcc0cc2c1ea6af8b768f90e311a9e052408cde1aa51b039bd429ab9159a5c8
SSDEEP

3072:5S8LmKVNHVerrFxU52RW5eDOPIRTBjcRZEEk1nRtO0dxGUve5xEtFWrZ3Ta5Q3:tCKDHCPNW5aU2OsEk1nnYAP5

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\EasyHook64.dll,#1
1⤵
PID:4520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4460,i,16856304285138459032,14480077487839828721,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:8
1⤵
PID:1316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy