Overview
overview
7Static
static
7HappyMod-3-0-3a.apk
android-9-x86
7HappyMod-3-0-3a.apk
android-11-x64
70OO00l111l1l
windows7-x64
10OO00l111l1l
windows10-2004-x64
1baseline.prof
windows7-x64
3baseline.prof
windows10-2004-x64
3baseline.profm
windows7-x64
3baseline.profm
windows10-2004-x64
3data.json
windows7-x64
3data.json
windows10-2004-x64
3demo.html
windows7-x64
1demo.html
windows10-2004-x64
1filedownlo...erties
windows7-x64
3filedownlo...erties
windows10-2004-x64
3happygame.js
windows7-x64
1happygame.js
windows10-2004-x64
1img_0.png
windows7-x64
3img_0.png
windows10-2004-x64
3img_1.png
windows7-x64
3img_1.png
windows10-2004-x64
3img_10.png
windows7-x64
3img_10.png
windows10-2004-x64
3img_11.png
windows7-x64
3img_11.png
windows10-2004-x64
3img_12.png
windows7-x64
3img_12.png
windows10-2004-x64
3img_2.png
windows7-x64
3img_2.png
windows10-2004-x64
3img_3.png
windows7-x64
3img_3.png
windows10-2004-x64
3img_4.png
windows7-x64
3img_4.png
windows10-2004-x64
3Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
01/09/2023, 14:29
Static task
static1
Behavioral task
behavioral1
Sample
HappyMod-3-0-3a.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
HappyMod-3-0-3a.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral3
Sample
0OO00l111l1l
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
0OO00l111l1l
Resource
win10v2004-20230831-en
Behavioral task
behavioral5
Sample
baseline.prof
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
baseline.prof
Resource
win10v2004-20230831-en
Behavioral task
behavioral7
Sample
baseline.profm
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
baseline.profm
Resource
win10v2004-20230831-en
Behavioral task
behavioral9
Sample
data.json
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
data.json
Resource
win10v2004-20230831-en
Behavioral task
behavioral11
Sample
demo.html
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
demo.html
Resource
win10v2004-20230831-en
Behavioral task
behavioral13
Sample
filedownloader.properties
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
filedownloader.properties
Resource
win10v2004-20230831-en
Behavioral task
behavioral15
Sample
happygame.js
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
happygame.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral17
Sample
img_0.png
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
img_0.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral19
Sample
img_1.png
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
img_1.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral21
Sample
img_10.png
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
img_10.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral23
Sample
img_11.png
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
img_11.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral25
Sample
img_12.png
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
img_12.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral27
Sample
img_2.png
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
img_2.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral29
Sample
img_3.png
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
img_3.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral31
Sample
img_4.png
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
img_4.png
Resource
win10v2004-20230831-en
General
-
Target
data.json
-
Size
30KB
-
MD5
bad31b8790d7e7e2fe1fee68e51a7199
-
SHA1
fa0db93edc98d99003685fd2f7ddb13a6ac4e718
-
SHA256
dddc30f815ee6f574119786d90957cc4744976185a808645d5d77afbf5817cb3
-
SHA512
c99acd26b97249c5c54c5050f5dfb602c22256580a01efa96306c5b2bc4c0084cef136301d0b025f62705f02251fb9956fce9c9f80b036dc46de582c412424ed
-
SSDEEP
384:68WTWVvKEiZoVjMMqvgA8Wg2GZpCz6VYfGrGzBGKxgz8lWfGldMi05R2rEK5sfd8:WlzYTi2DyvP83WdWDuh
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-528036852-1341495193-1175965888-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-528036852-1341495193-1175965888-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3756 OpenWith.exe