Overview
overview
6Static
static
3xdxd.zip
windows7-x64
6xdxd.zip
windows10-2004-x64
6Main/Adobe...IR.dll
windows7-x64
1Main/Adobe...IR.dll
windows10-2004-x64
1Main/Adobe...ry.exe
windows7-x64
1Main/Adobe...ry.exe
windows10-2004-x64
1Main/Adobe...OPYING
windows7-x64
1Main/Adobe...OPYING
windows10-2004-x64
1Main/Adobe...PL-2.1
windows7-x64
3Main/Adobe...PL-2.1
windows10-2004-x64
3Main/Adobe...PL-1.1
windows7-x64
3Main/Adobe...PL-1.1
windows10-2004-x64
3Main/Adobe...OPYING
windows7-x64
1Main/Adobe...OPYING
windows10-2004-x64
1Main/Adobe...OPYING
windows7-x64
1Main/Adobe...OPYING
windows10-2004-x64
1Main/DoM-Icon.png
windows7-x64
3Main/DoM-Icon.png
windows10-2004-x64
3Main/Domai...ca.exe
windows7-x64
1Main/Domai...ca.exe
windows10-2004-x64
1Main/META-...on.xml
windows7-x64
1Main/META-...on.xml
windows10-2004-x64
1Main/META-...pc.dll
windows7-x64
1Main/META-...pc.dll
windows10-2004-x64
1Main/META-...ry.swf
windows7-x64
3Main/META-...ry.swf
windows10-2004-x64
3Main/META-...on.xml
windows7-x64
1Main/META-...on.xml
windows10-2004-x64
1Main/META-...og.xml
windows7-x64
1Main/META-...og.xml
windows10-2004-x64
1Main/META-...ry.swf
windows7-x64
3Main/META-...ry.swf
windows10-2004-x64
3Analysis
-
max time kernel
1555s -
max time network
1592s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
15/05/2023, 17:13
Static task
static1
Behavioral task
behavioral1
Sample
xdxd.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
xdxd.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
Main/Adobe AIR/Versions/1.0/Adobe AIR.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Main/Adobe AIR/Versions/1.0/Adobe AIR.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Main/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Main/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-LGPL-2.1
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-LGPL-2.1
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-MPL-1.1
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-MPL-1.1
Resource
win10v2004-20230221-en
Behavioral task
behavioral13
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/pcre2/COPYING
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/pcre2/COPYING
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/pixman/COPYING
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
Main/Adobe AIR/Versions/1.0/Resources/Licenses/pixman/COPYING
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
Main/DoM-Icon.png
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
Main/DoM-Icon.png
Resource
win10v2004-20230221-en
Behavioral task
behavioral19
Sample
Main/Domain of Magica.exe
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
Main/Domain of Magica.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
Main/META-INF/AIR/application.xml
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
Main/META-INF/AIR/application.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/META-INF/ANE/Windows-x86-64/discord-rpc.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/META-INF/ANE/Windows-x86-64/discord-rpc.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/META-INF/ANE/Windows-x86-64/library.swf
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/META-INF/ANE/Windows-x86-64/library.swf
Resource
win10v2004-20230221-en
Behavioral task
behavioral27
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/META-INF/ANE/extension.xml
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/META-INF/ANE/extension.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/catalog.xml
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/catalog.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/library.swf
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
Main/META-INF/AIR/extensions/com.flut.rpcANE/library.swf
Resource
win10v2004-20230220-en
General
-
Target
Main/DoM-Icon.png
-
Size
4KB
-
MD5
de4e28592b22ccd493ea42b2eb0e50bf
-
SHA1
81650cdd47277dea6206cae9fae371267e1eb3fc
-
SHA256
7748f602fbd367ffc73204c86fd80d8f947a90cc1d3d7dbcbfc5cbdc76ead184
-
SHA512
703339a1d8e9d1e58dff64b7458c8d0044c1e912a61839c5578f5906ff323b95eceadc04ebb4118a99ae468bdd6912e47b329fbb275b379f0508af62a339442e
-
SSDEEP
96:9NaLbVAkxlnKb0+VM/qzkDY8z0ZNBTRqLCGHE18N:9NEAOKw+VIqPWejT5UEk
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).