Overview
overview
10Static
static
10MDE_File_S...fe.zip
windows10-1703-x64
1Full_Compl...up.zip
windows10-1703-x64
1Setup.exe
windows10-1703-x64
10resource/L...04.dat
windows10-1703-x64
3resource/L...05.dat
windows10-1703-x64
3resource/L...06.dat
windows10-1703-x64
3resource/L...07.dat
windows10-1703-x64
3resource/L...09.dat
windows10-1703-x64
3resource/L...0A.dat
windows10-1703-x64
3resource/L...0B.dat
windows10-1703-x64
3resource/L...0C.dat
windows10-1703-x64
3resource/L...0E.dat
windows10-1703-x64
3resource/L...10.dat
windows10-1703-x64
3resource/L...11.dat
windows10-1703-x64
3resource/L...12.dat
windows10-1703-x64
3resource/L...13.dat
windows10-1703-x64
3resource/L...14.dat
windows10-1703-x64
3resource/L...19.dat
windows10-1703-x64
3resource/L...1A.dat
windows10-1703-x64
3resource/L...1D.dat
windows10-1703-x64
3resource/L...1E.dat
windows10-1703-x64
3resource/L...1F.dat
windows10-1703-x64
3resource/L...24.dat
windows10-1703-x64
3resource/L...2A.dat
windows10-1703-x64
3resource/L...04.dat
windows10-1703-x64
3resource/L...16.dat
windows10-1703-x64
3resource/L...04.dat
windows10-1703-x64
3resource/R...er.xml
windows10-1703-x64
1resource/R...nd.xml
windows10-1703-x64
1resource/R...al.xml
windows10-1703-x64
1resource/R...ly.xml
windows10-1703-x64
1resource/R...ae.xml
windows10-1703-x64
1Analysis
-
max time kernel
138s -
max time network
179s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
19-06-2023 11:54
Behavioral task
behavioral1
Sample
MDE_File_Sample_a58e7e79a6ae4cd98779c9cb8387acb0d15ab1fe.zip
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
Full_Complete_Setup.zip
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
resource/Lang/0404.dat
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
resource/Lang/0405.dat
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
resource/Lang/0406.dat
Resource
win10-20230220-en
Behavioral task
behavioral7
Sample
resource/Lang/0407.dat
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
resource/Lang/0409.dat
Resource
win10-20230220-en
Behavioral task
behavioral9
Sample
resource/Lang/040A.dat
Resource
win10-20230220-en
Behavioral task
behavioral10
Sample
resource/Lang/040B.dat
Resource
win10-20230220-en
Behavioral task
behavioral11
Sample
resource/Lang/040C.dat
Resource
win10-20230220-en
Behavioral task
behavioral12
Sample
resource/Lang/040E.dat
Resource
win10-20230220-en
Behavioral task
behavioral13
Sample
resource/Lang/0410.dat
Resource
win10-20230220-en
Behavioral task
behavioral14
Sample
resource/Lang/0411.dat
Resource
win10-20230220-en
Behavioral task
behavioral15
Sample
resource/Lang/0412.dat
Resource
win10-20230220-en
Behavioral task
behavioral16
Sample
resource/Lang/0413.dat
Resource
win10-20230220-en
Behavioral task
behavioral17
Sample
resource/Lang/0414.dat
Resource
win10-20230220-en
Behavioral task
behavioral18
Sample
resource/Lang/0419.dat
Resource
win10-20230220-en
Behavioral task
behavioral19
Sample
resource/Lang/041A.dat
Resource
win10-20230220-en
Behavioral task
behavioral20
Sample
resource/Lang/041D.dat
Resource
win10-20230220-en
Behavioral task
behavioral21
Sample
resource/Lang/041E.dat
Resource
win10-20230220-en
Behavioral task
behavioral22
Sample
resource/Lang/041F.dat
Resource
win10-20230220-en
Behavioral task
behavioral23
Sample
resource/Lang/0424.dat
Resource
win10-20230220-en
Behavioral task
behavioral24
Sample
resource/Lang/042A.dat
Resource
win10-20230220-en
Behavioral task
behavioral25
Sample
resource/Lang/0804.dat
Resource
win10-20230220-en
Behavioral task
behavioral26
Sample
resource/Lang/0816.dat
Resource
win10-20230220-en
Behavioral task
behavioral27
Sample
resource/Lang/0C04.dat
Resource
win10-20230220-en
Behavioral task
behavioral28
Sample
resource/RedistList/Columm/bangJarfuls/bicronLoopier.xml
Resource
win10-20230220-en
Behavioral task
behavioral29
Sample
resource/RedistList/Columm/bangJarfuls/fullamWhealedParpend.xml
Resource
win10-20230220-en
Behavioral task
behavioral30
Sample
resource/RedistList/Columm/bangJarfuls/hamital.xml
Resource
win10-20230220-en
Behavioral task
behavioral31
Sample
resource/RedistList/Columm/bangJarfuls/peptoneLaikHomely.xml
Resource
win10-20230220-en
Behavioral task
behavioral32
Sample
resource/RedistList/Columm/bangJarfuls/spurreyGladsMorae.xml
Resource
win10-20230220-en
General
-
Target
resource/Lang/0C04.dat
-
Size
57KB
-
MD5
62cbfa3a8872361324fa94bc30719f37
-
SHA1
c66718cbfd09ccdf3322a12bfab60ade015964ca
-
SHA256
77d9a7267e8e3ab39738434da9e3b2a07a43accbcd5026c818127c543cc800e5
-
SHA512
e8b2810045b8d1d9e42bf669e77797df21c47cfa90776e7e7fb98256719e091d93e8a1eb432f0dd2e82162cf1221a4dcb91b0324729951a8f1adc48bde9f5dd0
-
SSDEEP
768:sB6XxIffr6pRKHq+e45YN67OI/H4ckAXN5iG9Q+IlbVJnFiMdutFp4emb08WLYxd:PXDXKY4B71H+iMyFmb08WLY8RslZD1
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-640001698-3754512395-3275565439-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-640001698-3754512395-3275565439-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 2940 OpenWith.exe