fc26da20c7ca8f009e2abb632bdbe0a73439e5b2c6fc97fd4fb2c9d34527c63c

Submit
Reports

Overview

overview

Static

static

Mr.Time to...ol.exe

windows7-x64

Mr.Time to...ol.exe

windows10-2004-x64

Mr.Time to...40.dll

windows7-x64

Mr.Time to...40.dll

windows10-2004-x64

Mr.Time to..._1.dll

windows7-x64

Mr.Time to..._1.dll

windows10-2004-x64

Mr.Time to...z2.dll

windows7-x64

Mr.Time to...z2.dll

windows10-2004-x64

Mr.Time to...al.dll

windows7-x64

Mr.Time to...al.dll

windows10-2004-x64

Mr.Time to...ib.dll

windows7-x64

Mr.Time to...ib.dll

windows10-2004-x64

Mr.Time to...ma.dll

windows7-x64

Mr.Time to...ma.dll

windows10-2004-x64

Mr.Time to...ue.dll

windows7-x64

Mr.Time to...ue.dll

windows10-2004-x64

Mr.Time to...sl.dll

windows7-x64

Mr.Time to...sl.dll

windows10-2004-x64

Mr.Time to...mi.dll

windows7-x64

Mr.Time to...mi.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Mr.Time to...-0.dll

windows10-2004-x64

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 05:51

Sharing

Copy URL

Twitter E-mail

Static task

static1

pyinstaller

2 signatures

Behavioral task

behavioral1

Sample

Mr.Time tool/Mr.Time tool.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Mr.Time tool/Mr.Time tool.exe

Resource

win10v2004-20240508-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

Mr.Time tool/_internal/VCRUNTIME140.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Mr.Time tool/_internal/VCRUNTIME140.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Mr.Time tool/_internal/VCRUNTIME140_1.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Mr.Time tool/_internal/VCRUNTIME140_1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Mr.Time tool/_internal/_bz2.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Mr.Time tool/_internal/_bz2.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Mr.Time tool/_internal/_decimal.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Mr.Time tool/_internal/_decimal.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Mr.Time tool/_internal/_hashlib.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Mr.Time tool/_internal/_hashlib.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Mr.Time tool/_internal/_lzma.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Mr.Time tool/_internal/_lzma.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Mr.Time tool/_internal/_queue.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Mr.Time tool/_internal/_queue.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Mr.Time tool/_internal/_ssl.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Mr.Time tool/_internal/_ssl.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Mr.Time tool/_internal/_wmi.dll

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Mr.Time tool/_internal/_wmi.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Mr.Time tool/_internal/api-ms-win-core-console-l1-1-0.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Mr.Time tool/_internal/api-ms-win-core-datetime-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Mr.Time tool/_internal/api-ms-win-core-debug-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Mr.Time tool/_internal/api-ms-win-core-errorhandling-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Mr.Time tool/_internal/api-ms-win-core-fibers-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Mr.Time tool/_internal/api-ms-win-core-file-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Mr.Time tool/_internal/api-ms-win-core-file-l1-2-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Mr.Time tool/_internal/api-ms-win-core-file-l2-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Mr.Time tool/_internal/api-ms-win-core-handle-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Mr.Time tool/_internal/api-ms-win-core-heap-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Mr.Time tool/_internal/api-ms-win-core-interlocked-l1-1-0.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Mr.Time tool/_internal/api-ms-win-core-libraryloader-l1-1-0.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Mr.Time tool/_internal/VCRUNTIME140_1.dll
Size

48KB
MD5

f8dfa78045620cf8a732e67d1b1eb53d
SHA1

ff9a604d8c99405bfdbbf4295825d3fcbc792704
SHA256

a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
SHA512

ba7f8b7ab0deb7a7113124c28092b543e216ca08d1cf158d9f40a326fb69f4a2511a41a59ea8482a10c9ec4ec8ac69b70dfe9ca65e525097d93b819d498da371
SSDEEP

768:wPIyGVrxmKqOnA4j3z6Su77A+i0QLxi9z9Rtii9zn+:fBr87uW1nA8QLx+zrti+zn+

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2916 wrote to memory of 2928	2916	rundll32.exe	WerFault.exe
PID 2916 wrote to memory of 2928	2916	rundll32.exe	WerFault.exe
PID 2916 wrote to memory of 2928	2916	rundll32.exe	WerFault.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Mr.Time tool\_internal\VCRUNTIME140_1.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2916

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2916 -s 80
2⤵
PID:2928

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads