Overview
overview
10Static
static
10MDE_File_S...fe.zip
windows10-1703-x64
1Full_Compl...up.zip
windows10-1703-x64
1Setup.exe
windows10-1703-x64
10resource/L...04.dat
windows10-1703-x64
3resource/L...05.dat
windows10-1703-x64
3resource/L...06.dat
windows10-1703-x64
3resource/L...07.dat
windows10-1703-x64
3resource/L...09.dat
windows10-1703-x64
3resource/L...0A.dat
windows10-1703-x64
3resource/L...0B.dat
windows10-1703-x64
3resource/L...0C.dat
windows10-1703-x64
3resource/L...0E.dat
windows10-1703-x64
3resource/L...10.dat
windows10-1703-x64
3resource/L...11.dat
windows10-1703-x64
3resource/L...12.dat
windows10-1703-x64
3resource/L...13.dat
windows10-1703-x64
3resource/L...14.dat
windows10-1703-x64
3resource/L...19.dat
windows10-1703-x64
3resource/L...1A.dat
windows10-1703-x64
3resource/L...1D.dat
windows10-1703-x64
3resource/L...1E.dat
windows10-1703-x64
3resource/L...1F.dat
windows10-1703-x64
3resource/L...24.dat
windows10-1703-x64
3resource/L...2A.dat
windows10-1703-x64
3resource/L...04.dat
windows10-1703-x64
3resource/L...16.dat
windows10-1703-x64
3resource/L...04.dat
windows10-1703-x64
3resource/R...er.xml
windows10-1703-x64
1resource/R...nd.xml
windows10-1703-x64
1resource/R...al.xml
windows10-1703-x64
1resource/R...ly.xml
windows10-1703-x64
1resource/R...ae.xml
windows10-1703-x64
1Analysis
-
max time kernel
49s -
max time network
70s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
19-06-2023 11:54
Behavioral task
behavioral1
Sample
MDE_File_Sample_a58e7e79a6ae4cd98779c9cb8387acb0d15ab1fe.zip
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
Full_Complete_Setup.zip
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
resource/Lang/0404.dat
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
resource/Lang/0405.dat
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
resource/Lang/0406.dat
Resource
win10-20230220-en
Behavioral task
behavioral7
Sample
resource/Lang/0407.dat
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
resource/Lang/0409.dat
Resource
win10-20230220-en
Behavioral task
behavioral9
Sample
resource/Lang/040A.dat
Resource
win10-20230220-en
Behavioral task
behavioral10
Sample
resource/Lang/040B.dat
Resource
win10-20230220-en
Behavioral task
behavioral11
Sample
resource/Lang/040C.dat
Resource
win10-20230220-en
Behavioral task
behavioral12
Sample
resource/Lang/040E.dat
Resource
win10-20230220-en
Behavioral task
behavioral13
Sample
resource/Lang/0410.dat
Resource
win10-20230220-en
Behavioral task
behavioral14
Sample
resource/Lang/0411.dat
Resource
win10-20230220-en
Behavioral task
behavioral15
Sample
resource/Lang/0412.dat
Resource
win10-20230220-en
Behavioral task
behavioral16
Sample
resource/Lang/0413.dat
Resource
win10-20230220-en
Behavioral task
behavioral17
Sample
resource/Lang/0414.dat
Resource
win10-20230220-en
Behavioral task
behavioral18
Sample
resource/Lang/0419.dat
Resource
win10-20230220-en
Behavioral task
behavioral19
Sample
resource/Lang/041A.dat
Resource
win10-20230220-en
Behavioral task
behavioral20
Sample
resource/Lang/041D.dat
Resource
win10-20230220-en
Behavioral task
behavioral21
Sample
resource/Lang/041E.dat
Resource
win10-20230220-en
Behavioral task
behavioral22
Sample
resource/Lang/041F.dat
Resource
win10-20230220-en
Behavioral task
behavioral23
Sample
resource/Lang/0424.dat
Resource
win10-20230220-en
Behavioral task
behavioral24
Sample
resource/Lang/042A.dat
Resource
win10-20230220-en
Behavioral task
behavioral25
Sample
resource/Lang/0804.dat
Resource
win10-20230220-en
Behavioral task
behavioral26
Sample
resource/Lang/0816.dat
Resource
win10-20230220-en
Behavioral task
behavioral27
Sample
resource/Lang/0C04.dat
Resource
win10-20230220-en
Behavioral task
behavioral28
Sample
resource/RedistList/Columm/bangJarfuls/bicronLoopier.xml
Resource
win10-20230220-en
Behavioral task
behavioral29
Sample
resource/RedistList/Columm/bangJarfuls/fullamWhealedParpend.xml
Resource
win10-20230220-en
Behavioral task
behavioral30
Sample
resource/RedistList/Columm/bangJarfuls/hamital.xml
Resource
win10-20230220-en
Behavioral task
behavioral31
Sample
resource/RedistList/Columm/bangJarfuls/peptoneLaikHomely.xml
Resource
win10-20230220-en
Behavioral task
behavioral32
Sample
resource/RedistList/Columm/bangJarfuls/spurreyGladsMorae.xml
Resource
win10-20230220-en
General
-
Target
resource/Lang/0411.dat
-
Size
61KB
-
MD5
70079aba3c883bd5bd646344c78b2caa
-
SHA1
775a34cba33e9f66949efa314607a6766f75dc47
-
SHA256
f2bd7e6d032f049b30c35825ff7dfad38f4380968fb4a57372f7b809ca26eb3f
-
SHA512
a90be98ede2b2d60b3ce13c0fcda1fb3eff97176283d0aebefc4f6166e1bc142a499910ac46ce26c9bcf591dc0f0610e8556dd83771923b79d3e0e14871b9f74
-
SSDEEP
768:IspCY6aqQPXTApU+pjrryCtmAWlya7BHvmvXfiKwDjrUE9q56WaNp3vHrJcrKqlB:ECLApdCKwDjrUt
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1311743041-1167936498-546579926-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1311743041-1167936498-546579926-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 2460 OpenWith.exe