41caeb1dab6ab9da4571b88cd0a0a2b3a21ce305909358e538a04f988d4a139f | Triage

Submit
Reports

Overview

overview

Static

static

hwid pack/...sk.exe

windows11-21h2-x64

6

hwid pack/...up.exe

windows11-21h2-x64

1

hwid pack/...RU.exe

windows11-21h2-x64

1

hwid pack/...ll.exe

windows11-21h2-x64

1

hwid pack/...rt.exe

windows11-21h2-x64

5

hwid pack/...64.exe

windows11-21h2-x64

5

hwid pack/...IN.exe

windows11-21h2-x64

1

hwid pack/...64.exe

windows11-21h2-x64

1

hwid pack/...16.exe

windows11-21h2-x64

hwid pack/...IT.exe

windows11-21h2-x64

1

hwid pack/...LL.dll

windows11-21h2-x64

3

hwid pack/...YS.sys

windows11-21h2-x64

1

hwid pack/...64.sys

windows11-21h2-x64

1

hwid pack/...64.sys

windows11-21h2-x64

1

hwid pack/...lp.pdf

windows11-21h2-x64

1

hwid pack/...rt.exe

windows11-21h2-x64

1

hwid pack/...Un.exe

windows11-21h2-x64

6

hwid pack/...Un.exe

windows11-21h2-x64

6

hwid pack/...ew.chm

windows11-21h2-x64

1

hwid pack/...ew.exe

windows11-21h2-x64

6

Analysis

max time kernel
452s
max time network
458s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
30-06-2024 16:43

Sharing

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

hwid pack/HardDisk.exe

Resource

win11-20240611-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral2

Sample

hwid pack/MacSetup.exe

Resource

win11-20240419-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral3

Sample

hwid pack/monitor serial/CRU.exe

Resource

win11-20240508-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral4

Sample

hwid pack/monitor serial/reset-all.exe

Resource

win11-20240508-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral5

Sample

hwid pack/monitor serial/restart.exe

Resource

win11-20240508-en

windows11-21h2-x64

6 signatures

600 seconds

Behavioral task

behavioral6

Sample

hwid pack/monitor serial/restart64.exe

Resource

win11-20240611-en

windows11-21h2-x64

5 signatures

600 seconds

Behavioral task

behavioral7

Sample

hwid pack/serial changer/AMIDEWIN.exe

Resource

win11-20240508-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral8

Sample

hwid pack/serial changer/AMIDEWINx64.exe

Resource

win11-20240508-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral9

Sample

hwid pack/serial changer/DMI16.exe

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral10

Sample

hwid pack/serial changer/DMIEDIT.exe

Resource

win11-20240611-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral11

Sample

hwid pack/serial changer/UCOREDLL.dll

Resource

win11-20240508-en

windows11-21h2-x64

2 signatures

600 seconds

Behavioral task

behavioral12

Sample

hwid pack/serial changer/UCORESYS.sys

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral13

Sample

hwid pack/serial changer/UCOREW64.sys

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral14

Sample

hwid pack/serial changer/amifldrv64.sys

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral15

Sample

hwid pack/uninstall/Revo Uninstaller Help.pdf

Resource

win11-20240508-en

windows11-21h2-x64

5 signatures

600 seconds

Behavioral task

behavioral16

Sample

hwid pack/uninstall/RevoUPort.exe

Resource

win11-20240508-en

windows11-21h2-x64

4 signatures

600 seconds

Behavioral task

behavioral17

Sample

hwid pack/uninstall/x64/RevoUn.exe

Resource

win11-20240508-en

windows11-21h2-x64

5 signatures

600 seconds

Behavioral task

behavioral18

Sample

hwid pack/uninstall/x86/RevoUn.exe

Resource

win11-20240611-en

windows11-21h2-x64

6 signatures

600 seconds

Behavioral task

behavioral19

Sample

hwid pack/usb device serial/USBDeview.chm

Resource

win11-20240611-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral20

Sample

hwid pack/usb device serial/USBDeview.exe

Resource

win11-20240611-en

windows11-21h2-x64

4 signatures

600 seconds

Report Analysis Logs

General

Target

hwid pack/serial changer/amifldrv64.sys
Size

18KB
MD5

785045f8b25cd2e937ddc6b09debe01a
SHA1

029c678674f482ababe8bbfdb93152392457109d
SHA256

37073e42ffa0322500f90cd7e3c8d02c4cdd695d31c77e81560abec20bfb68ba
SHA512

40bbeb41816146c7172aa3cf27dace538908b7955171968e1cddcd84403b2588e0d8437a3596c2714ccdf4476eefa3d4e61d90ea118982b729f50b03df1104a9
SSDEEP

384:Cf8OVN6UDYm+b10HMHd6xhxuGZBBfSZsHLPK6jz/cf:CffV8KApCMMxDuIPKgwf

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\hwid pack\serial changer\amifldrv64.sys"
1⤵
PID:4988

C:\Users\Admin\AppData\Local\Temp\hwid pack\serial changer\amifldrv64.sys
"C:\Users\Admin\AppData\Local\Temp\hwid pack\serial changer\amifldrv64.sys"
2⤵
PID:3948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3948-0-0x0000000000010000-0x0000000000017000-memory.dmp

Filesize
28KB

Download

© 2018-2024

Terms | Privacy