Overview
overview
10Static
static
10MDE_File_S...fe.zip
windows10-1703-x64
1Full_Compl...up.zip
windows10-1703-x64
1Setup.exe
windows10-1703-x64
10resource/L...04.dat
windows10-1703-x64
3resource/L...05.dat
windows10-1703-x64
3resource/L...06.dat
windows10-1703-x64
3resource/L...07.dat
windows10-1703-x64
3resource/L...09.dat
windows10-1703-x64
3resource/L...0A.dat
windows10-1703-x64
3resource/L...0B.dat
windows10-1703-x64
3resource/L...0C.dat
windows10-1703-x64
3resource/L...0E.dat
windows10-1703-x64
3resource/L...10.dat
windows10-1703-x64
3resource/L...11.dat
windows10-1703-x64
3resource/L...12.dat
windows10-1703-x64
3resource/L...13.dat
windows10-1703-x64
3resource/L...14.dat
windows10-1703-x64
3resource/L...19.dat
windows10-1703-x64
3resource/L...1A.dat
windows10-1703-x64
3resource/L...1D.dat
windows10-1703-x64
3resource/L...1E.dat
windows10-1703-x64
3resource/L...1F.dat
windows10-1703-x64
3resource/L...24.dat
windows10-1703-x64
3resource/L...2A.dat
windows10-1703-x64
3resource/L...04.dat
windows10-1703-x64
3resource/L...16.dat
windows10-1703-x64
3resource/L...04.dat
windows10-1703-x64
3resource/R...er.xml
windows10-1703-x64
1resource/R...nd.xml
windows10-1703-x64
1resource/R...al.xml
windows10-1703-x64
1resource/R...ly.xml
windows10-1703-x64
1resource/R...ae.xml
windows10-1703-x64
1Analysis
-
max time kernel
130s -
max time network
143s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
19-06-2023 11:54
Behavioral task
behavioral1
Sample
MDE_File_Sample_a58e7e79a6ae4cd98779c9cb8387acb0d15ab1fe.zip
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
Full_Complete_Setup.zip
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
resource/Lang/0404.dat
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
resource/Lang/0405.dat
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
resource/Lang/0406.dat
Resource
win10-20230220-en
Behavioral task
behavioral7
Sample
resource/Lang/0407.dat
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
resource/Lang/0409.dat
Resource
win10-20230220-en
Behavioral task
behavioral9
Sample
resource/Lang/040A.dat
Resource
win10-20230220-en
Behavioral task
behavioral10
Sample
resource/Lang/040B.dat
Resource
win10-20230220-en
Behavioral task
behavioral11
Sample
resource/Lang/040C.dat
Resource
win10-20230220-en
Behavioral task
behavioral12
Sample
resource/Lang/040E.dat
Resource
win10-20230220-en
Behavioral task
behavioral13
Sample
resource/Lang/0410.dat
Resource
win10-20230220-en
Behavioral task
behavioral14
Sample
resource/Lang/0411.dat
Resource
win10-20230220-en
Behavioral task
behavioral15
Sample
resource/Lang/0412.dat
Resource
win10-20230220-en
Behavioral task
behavioral16
Sample
resource/Lang/0413.dat
Resource
win10-20230220-en
Behavioral task
behavioral17
Sample
resource/Lang/0414.dat
Resource
win10-20230220-en
Behavioral task
behavioral18
Sample
resource/Lang/0419.dat
Resource
win10-20230220-en
Behavioral task
behavioral19
Sample
resource/Lang/041A.dat
Resource
win10-20230220-en
Behavioral task
behavioral20
Sample
resource/Lang/041D.dat
Resource
win10-20230220-en
Behavioral task
behavioral21
Sample
resource/Lang/041E.dat
Resource
win10-20230220-en
Behavioral task
behavioral22
Sample
resource/Lang/041F.dat
Resource
win10-20230220-en
Behavioral task
behavioral23
Sample
resource/Lang/0424.dat
Resource
win10-20230220-en
Behavioral task
behavioral24
Sample
resource/Lang/042A.dat
Resource
win10-20230220-en
Behavioral task
behavioral25
Sample
resource/Lang/0804.dat
Resource
win10-20230220-en
Behavioral task
behavioral26
Sample
resource/Lang/0816.dat
Resource
win10-20230220-en
Behavioral task
behavioral27
Sample
resource/Lang/0C04.dat
Resource
win10-20230220-en
Behavioral task
behavioral28
Sample
resource/RedistList/Columm/bangJarfuls/bicronLoopier.xml
Resource
win10-20230220-en
Behavioral task
behavioral29
Sample
resource/RedistList/Columm/bangJarfuls/fullamWhealedParpend.xml
Resource
win10-20230220-en
Behavioral task
behavioral30
Sample
resource/RedistList/Columm/bangJarfuls/hamital.xml
Resource
win10-20230220-en
Behavioral task
behavioral31
Sample
resource/RedistList/Columm/bangJarfuls/peptoneLaikHomely.xml
Resource
win10-20230220-en
Behavioral task
behavioral32
Sample
resource/RedistList/Columm/bangJarfuls/spurreyGladsMorae.xml
Resource
win10-20230220-en
General
-
Target
resource/Lang/041D.dat
-
Size
77KB
-
MD5
74d1034ad1837233bb2e44a47e2e1052
-
SHA1
7452588ef3eacd62c5ca1aae9380a4978bd2a570
-
SHA256
2a9abfbfaeb022be5bef7128a2393d1229437a633a925228f363b2c3543f55ca
-
SHA512
041640e1b0e828190e77e3db8111b075b0e0b1775ef0c60440fc9bcdfe97bbc1bc4e6085b18a13cb86ebe94e981b57bc877499df4f217bdeb8d8b79f1d3f9af0
-
SSDEEP
1536:3v/mGKwLSExC0qFoOmDoBEfBTYERO+mbidzuOsGR5y5LEGHEJhXHNVONcIsaQTf:/ZKcSExIFoOmDoBkBTBk+8iQOsGR5y5Q
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-3853465373-1718857667-1861325682-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3853465373-1718857667-1861325682-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 3900 OpenWith.exe