Overview
overview
9Static
static
3Mr.Time to...ol.exe
windows7-x64
1Mr.Time to...ol.exe
windows10-2004-x64
9Mr.Time to...40.dll
windows7-x64
1Mr.Time to...40.dll
windows10-2004-x64
1Mr.Time to..._1.dll
windows7-x64
1Mr.Time to..._1.dll
windows10-2004-x64
1Mr.Time to...z2.dll
windows7-x64
1Mr.Time to...z2.dll
windows10-2004-x64
1Mr.Time to...al.dll
windows7-x64
1Mr.Time to...al.dll
windows10-2004-x64
1Mr.Time to...ib.dll
windows7-x64
1Mr.Time to...ib.dll
windows10-2004-x64
1Mr.Time to...ma.dll
windows7-x64
1Mr.Time to...ma.dll
windows10-2004-x64
1Mr.Time to...ue.dll
windows7-x64
1Mr.Time to...ue.dll
windows10-2004-x64
1Mr.Time to...sl.dll
windows7-x64
1Mr.Time to...sl.dll
windows10-2004-x64
1Mr.Time to...mi.dll
windows7-x64
1Mr.Time to...mi.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Resubmissions
01-07-2024 05:41
240701-gdt77a1clj 9Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 05:41
Behavioral task
behavioral1
Sample
Mr.Time tool/Mr.Time tool.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Mr.Time tool/Mr.Time tool.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Mr.Time tool/_internal/VCRUNTIME140.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Mr.Time tool/_internal/VCRUNTIME140.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Mr.Time tool/_internal/VCRUNTIME140_1.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
Mr.Time tool/_internal/VCRUNTIME140_1.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Mr.Time tool/_internal/_bz2.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
Mr.Time tool/_internal/_bz2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Mr.Time tool/_internal/_decimal.dll
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
Mr.Time tool/_internal/_decimal.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Mr.Time tool/_internal/_hashlib.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
Mr.Time tool/_internal/_hashlib.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
Mr.Time tool/_internal/_lzma.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
Mr.Time tool/_internal/_lzma.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Mr.Time tool/_internal/_queue.dll
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
Mr.Time tool/_internal/_queue.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Mr.Time tool/_internal/_ssl.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
Mr.Time tool/_internal/_ssl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Mr.Time tool/_internal/_wmi.dll
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
Mr.Time tool/_internal/_wmi.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Mr.Time tool/_internal/api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral22
Sample
Mr.Time tool/_internal/api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
Mr.Time tool/_internal/api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral24
Sample
Mr.Time tool/_internal/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Mr.Time tool/_internal/api-ms-win-core-fibers-l1-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral26
Sample
Mr.Time tool/_internal/api-ms-win-core-file-l1-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Mr.Time tool/_internal/api-ms-win-core-file-l1-2-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral28
Sample
Mr.Time tool/_internal/api-ms-win-core-file-l2-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
Mr.Time tool/_internal/api-ms-win-core-handle-l1-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral30
Sample
Mr.Time tool/_internal/api-ms-win-core-heap-l1-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
Mr.Time tool/_internal/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral32
Sample
Mr.Time tool/_internal/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win10v2004-20240611-en
General
-
Target
Mr.Time tool/_internal/VCRUNTIME140.dll
-
Size
116KB
-
MD5
be8dbe2dc77ebe7f88f910c61aec691a
-
SHA1
a19f08bb2b1c1de5bb61daf9f2304531321e0e40
-
SHA256
4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
-
SHA512
0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
-
SSDEEP
1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 1620 wrote to memory of 2908 1620 rundll32.exe WerFault.exe PID 1620 wrote to memory of 2908 1620 rundll32.exe WerFault.exe PID 1620 wrote to memory of 2908 1620 rundll32.exe WerFault.exe