Overview
overview
3Static
static
3Monster_Bl...en.rar
windows7-x64
3Monster_Bl...en.rar
windows10-2004-x64
3Monster Bl...gc.dll
windows7-x64
1Monster Bl...gc.dll
windows10-2004-x64
1Monster Bl...tor.js
windows7-x64
1Monster Bl...tor.js
windows10-2004-x64
1Monster Bl...tor.js
windows7-x64
1Monster Bl...tor.js
windows10-2004-x64
1Monster Bl...tor.js
windows7-x64
1Monster Bl...tor.js
windows10-2004-x64
1Monster Bl...et.exe
windows7-x64
1Monster Bl...et.exe
windows10-2004-x64
1Monster Bl...ss.dll
windows7-x64
1Monster Bl...ss.dll
windows10-2004-x64
1Monster Bl...rp.dll
windows7-x64
1Monster Bl...rp.dll
windows10-2004-x64
1Monster Bl...xt.dll
windows7-x64
1Monster Bl...xt.dll
windows10-2004-x64
1Monster Bl...mo.dll
windows7-x64
1Monster Bl...mo.dll
windows10-2004-x64
1Monster Bl...me.dll
windows7-x64
1Monster Bl...me.dll
windows10-2004-x64
1Monster Bl...UI.dll
windows7-x64
1Monster Bl...UI.dll
windows10-2004-x64
1Monster Bl...en.dll
windows7-x64
1Monster Bl...en.dll
windows10-2004-x64
1Monster Bl...me.dll
windows7-x64
1Monster Bl...me.dll
windows10-2004-x64
1Monster Bl...mo.dll
windows7-x64
1Monster Bl...mo.dll
windows10-2004-x64
1Monster Bl...RP.dll
windows7-x64
1Monster Bl...RP.dll
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14-10-2023 01:32
Static task
static1
Behavioral task
behavioral1
Sample
Monster_Black_Market_V2.0.16.0_w_DLC_w_Uncen.rar
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Monster_Black_Market_V2.0.16.0_w_DLC_w_Uncen.rar
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.js
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.js
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket.exe
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/Assembly-CSharp.dll
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/BCrypt.Net-Next.dll
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/BCrypt.Net-Next.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/CFXRDemo.dll
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/CFXRDemo.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/CFXRRuntime.dll
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/CFXRRuntime.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/Coffee.UnmaskForUGUI.dll
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/Coffee.UnmaskForUGUI.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/DOTween.dll
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/DOTween.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/KinoBloom.Runtime.dll
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/KinoBloom.Runtime.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral29
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/LeTai.TranslucentImage.Demo.dll
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/LeTai.TranslucentImage.Demo.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral31
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/LeTai.TranslucentImage.UniversalRP.dll
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
Monster Black Market V2.0.16.0 w DLC w Uncen/MonsterBlackMarket_Data/Managed/LeTai.TranslucentImage.UniversalRP.dll
Resource
win10v2004-20230915-en
General
-
Target
Monster_Black_Market_V2.0.16.0_w_DLC_w_Uncen.rar
-
Size
284.2MB
-
MD5
6265b26f57bc613b15f8a1f6bfa3c7ca
-
SHA1
46d2b1210e9bc4d1b2c984811e18496d43eec602
-
SHA256
6ded378bf47dbf5e769640206732495d6470f4ec45ac1497bbb338913889ff5b
-
SHA512
b4f3806eb1827c0836943074ab89830c2742accf412869b4c8caf5236d571e78495feff0478c31cce082298d9a44df3842fbbba3de031f354690ecf3efcb8bad
-
SSDEEP
6291456:iWU9N3qqOlY05+aw8bTSbFWVChf4HV8M3u/jdU8odL7F:j1+ZYy4VAfWV986dL7F
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1926387074-3400613176-3566796709-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1926387074-3400613176-3566796709-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 228 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Monster_Black_Market_V2.0.16.0_w_DLC_w_Uncen.rar1⤵
- Modifies registry class
PID:4272
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:228