Overview
overview
6Static
static
3Mr.Time to...ol.exe
windows7-x64
1Mr.Time to...ol.exe
windows10-2004-x64
6Mr.Time to...40.dll
windows7-x64
1Mr.Time to...40.dll
windows10-2004-x64
1Mr.Time to..._1.dll
windows7-x64
1Mr.Time to..._1.dll
windows10-2004-x64
1Mr.Time to...z2.dll
windows7-x64
1Mr.Time to...z2.dll
windows10-2004-x64
1Mr.Time to...al.dll
windows7-x64
1Mr.Time to...al.dll
windows10-2004-x64
1Mr.Time to...ib.dll
windows7-x64
1Mr.Time to...ib.dll
windows10-2004-x64
1Mr.Time to...ma.dll
windows7-x64
1Mr.Time to...ma.dll
windows10-2004-x64
1Mr.Time to...ue.dll
windows7-x64
1Mr.Time to...ue.dll
windows10-2004-x64
1Mr.Time to...sl.dll
windows7-x64
1Mr.Time to...sl.dll
windows10-2004-x64
1Mr.Time to...mi.dll
windows7-x64
1Mr.Time to...mi.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Mr.Time to...-0.dll
windows10-2004-x64
1Analysis
-
max time kernel
129s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
01-07-2024 05:51
Behavioral task
behavioral1
Sample
Mr.Time tool/Mr.Time tool.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Mr.Time tool/Mr.Time tool.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Mr.Time tool/_internal/VCRUNTIME140.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Mr.Time tool/_internal/VCRUNTIME140.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Mr.Time tool/_internal/VCRUNTIME140_1.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Mr.Time tool/_internal/VCRUNTIME140_1.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Mr.Time tool/_internal/_bz2.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
Mr.Time tool/_internal/_bz2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Mr.Time tool/_internal/_decimal.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Mr.Time tool/_internal/_decimal.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
Mr.Time tool/_internal/_hashlib.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
Mr.Time tool/_internal/_hashlib.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Mr.Time tool/_internal/_lzma.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
Mr.Time tool/_internal/_lzma.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Mr.Time tool/_internal/_queue.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Mr.Time tool/_internal/_queue.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
Mr.Time tool/_internal/_ssl.dll
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
Mr.Time tool/_internal/_ssl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Mr.Time tool/_internal/_wmi.dll
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
Mr.Time tool/_internal/_wmi.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Mr.Time tool/_internal/api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral22
Sample
Mr.Time tool/_internal/api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Mr.Time tool/_internal/api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral24
Sample
Mr.Time tool/_internal/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
Mr.Time tool/_internal/api-ms-win-core-fibers-l1-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral26
Sample
Mr.Time tool/_internal/api-ms-win-core-file-l1-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Mr.Time tool/_internal/api-ms-win-core-file-l1-2-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral28
Sample
Mr.Time tool/_internal/api-ms-win-core-file-l2-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
Mr.Time tool/_internal/api-ms-win-core-handle-l1-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral30
Sample
Mr.Time tool/_internal/api-ms-win-core-heap-l1-1-0.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
Mr.Time tool/_internal/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral32
Sample
Mr.Time tool/_internal/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win10v2004-20240611-en
General
-
Target
Mr.Time tool/Mr.Time tool.exe
-
Size
2.4MB
-
MD5
bc5143288bfb94c2b01f663cb825fdda
-
SHA1
3dfe1af882697fef434622dbff60e6d9e34c093e
-
SHA256
f27c66a7b23f8d5f3830a5f14d55f21f0f97e87b0acd8813b830d38814444127
-
SHA512
d29532451c843fe85dbb8ad3157b466a90ce55e783ed99177e164bdd097c12f3f6fed4ec986cb312f40e7ff21324b460443cf68bc391e9f04e6d179a1886936e
-
SSDEEP
49152:7igqK8cqO3dOGDA7yzwUnFLYowtzQNdzmJFjemauDZlbgdlixIU30snQLq:7i7K8DPGDOycUnpY7lQj2FKmFDzMfiLk
Malware Config
Signatures
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes:
Mr.Time tool.exedescription pid process target process PID 3616 wrote to memory of 3776 3616 Mr.Time tool.exe cmd.exe PID 3616 wrote to memory of 3776 3616 Mr.Time tool.exe cmd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Mr.Time tool\Mr.Time tool.exe"C:\Users\Admin\AppData\Local\Temp\Mr.Time tool\Mr.Time tool.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "title "M̸̬̃ř̸̖.̵̦̐T̴̤̅i̴̞͝m̵͕̅è̷̖ ̵̤̈́D̷̝̿Ď̸̖O̸͉͒Ś̶̢ ̷̩̏T̶̲̆O̵̪͠Ō̴͓Ĺ̴͈""2⤵