Overview
overview
5Static
static
1shaders/wo...ed.vsh
windows7-x64
3shaders/wo...ed.vsh
windows10-2004-x64
3shaders/wo...er.fsh
windows7-x64
3shaders/wo...er.fsh
windows10-2004-x64
3shaders/wo...er.vsh
windows7-x64
3shaders/wo...er.vsh
windows10-2004-x64
3shaders/wo...te.fsh
windows7-x64
3shaders/wo...te.fsh
windows10-2004-x64
3shaders/wo...te.vsh
windows7-x64
3shaders/wo...te.vsh
windows10-2004-x64
3shaders/wo...e1.fsh
windows7-x64
3shaders/wo...e1.fsh
windows10-2004-x64
3shaders/wo...e3.fsh
windows7-x64
3shaders/wo...e3.fsh
windows10-2004-x64
3shaders/wo...e3.vsh
windows7-x64
3shaders/wo...e3.vsh
windows10-2004-x64
3shaders/wo...e4.fsh
windows7-x64
3shaders/wo...e4.fsh
windows10-2004-x64
3shaders/wo...e4.vsh
windows7-x64
3shaders/wo...e4.vsh
windows10-2004-x64
5shaders/wo...al.fsh
windows7-x64
3shaders/wo...al.fsh
windows10-2004-x64
3shaders/wo...al.vsh
windows7-x64
3shaders/wo...al.vsh
windows10-2004-x64
3shaders/wo...nt.fsh
windows7-x64
3shaders/wo...nt.fsh
windows10-2004-x64
3shaders/wo...nt.vsh
windows7-x64
3shaders/wo...nt.vsh
windows10-2004-x64
3shaders/wo...ic.fsh
windows7-x64
3shaders/wo...ic.fsh
windows10-2004-x64
3shaders/wo...ic.vsh
windows7-x64
3shaders/wo...ic.vsh
windows10-2004-x64
3Analysis
-
max time kernel
138s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2023, 15:15
Static task
static1
Behavioral task
behavioral1
Sample
shaders/world-1/gbuffers_textured.vsh
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
shaders/world-1/gbuffers_textured.vsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
shaders/world-1/gbuffers_water.fsh
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
shaders/world-1/gbuffers_water.fsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
shaders/world-1/gbuffers_water.vsh
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
shaders/world-1/gbuffers_water.vsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
shaders/world1/composite.fsh
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
shaders/world1/composite.fsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
shaders/world1/composite.vsh
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
shaders/world1/composite.vsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
shaders/world1/composite1.fsh
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
shaders/world1/composite1.fsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
shaders/world1/composite3.fsh
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
shaders/world1/composite3.fsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
shaders/world1/composite3.vsh
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
shaders/world1/composite3.vsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
shaders/world1/composite4.fsh
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
shaders/world1/composite4.fsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
shaders/world1/composite4.vsh
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
shaders/world1/composite4.vsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
shaders/world1/final.fsh
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
shaders/world1/final.fsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
shaders/world1/final.vsh
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
shaders/world1/final.vsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
shaders/world1/gbuffers_armor_glint.fsh
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
shaders/world1/gbuffers_armor_glint.fsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
shaders/world1/gbuffers_armor_glint.vsh
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
shaders/world1/gbuffers_armor_glint.vsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
shaders/world1/gbuffers_basic.fsh
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
shaders/world1/gbuffers_basic.fsh
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
shaders/world1/gbuffers_basic.vsh
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
shaders/world1/gbuffers_basic.vsh
Resource
win10v2004-20230703-en
General
-
Target
shaders/world-1/gbuffers_water.vsh
-
Size
6KB
-
MD5
a39018004298d6db957c881c8a14a2f0
-
SHA1
7f9b823d50e9684b9c567d83b2bda2087d6c54dd
-
SHA256
adc0b33cb72d10555e548ff04d23b23ea7fbb877946a739e4d862bc7b60e987b
-
SHA512
5823e77615f9ac02c7c20ed5b39f6f28460745869a6f1838bcca1c2f646fb8168380613676bb97d1714d2d27ea78d9c2307679f261856d1a027297178bf3543b
-
SSDEEP
96:aZRNf5ycOv67LM4JY4kC5hYRduVF6fOJ3pwzsI4C5t30S0:adRsyjJY4kC5h6duak5K5t30S0
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4176143399-3250363947-192774652-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-4176143399-3250363947-192774652-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3860 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\shaders\world-1\gbuffers_water.vsh1⤵
- Modifies registry class
PID:2476
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3860