Overview
overview
10Static
static
10x360ce.rar
windows7-x64
3x360ce.rar
windows10-2004-x64
3x360ce.exe
windows7-x64
7x360ce.exe
windows10-2004-x64
1x360ce.ini
windows7-x64
1x360ce.ini
windows10-2004-x64
1x360ce_x64.exe
windows7-x64
7x360ce_x64.exe
windows10-2004-x64
1xinput1_1.dll
windows7-x64
1xinput1_1.dll
windows10-2004-x64
1xinput1_2.dll
windows7-x64
1xinput1_2.dll
windows10-2004-x64
1xinput1_3.dll
windows7-x64
1xinput1_3.dll
windows10-2004-x64
1xinput1_4.dll
windows7-x64
1xinput1_4.dll
windows10-2004-x64
1xinput9_1_0.dll
windows7-x64
1xinput9_1_0.dll
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
26-11-2023 01:23
Behavioral task
behavioral1
Sample
x360ce.rar
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
x360ce.rar
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
x360ce.exe
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
x360ce.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
x360ce.ini
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
x360ce.ini
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
x360ce_x64.exe
Resource
win7-20231025-en
Behavioral task
behavioral8
Sample
x360ce_x64.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
xinput1_1.dll
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
xinput1_1.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
xinput1_2.dll
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
xinput1_2.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
xinput1_3.dll
Resource
win7-20231025-en
Behavioral task
behavioral14
Sample
xinput1_3.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
xinput1_4.dll
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
xinput1_4.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
xinput9_1_0.dll
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
xinput9_1_0.dll
Resource
win10v2004-20231023-en
General
-
Target
x360ce.exe
-
Size
3.1MB
-
MD5
b6e5bd3c6abd734ac9d66f7dbcdb8409
-
SHA1
485e46c4dcf4d1274eae63932c024bdf9fc52e34
-
SHA256
28e424c515f3724c872fc1d5d79709fa9d13e7986c47fb678b90a677a225abf5
-
SHA512
2e825c315db6761af99385d6be13308bc0f111d024b8a0e9e22d806d54b8312c1864f08799b73ee7b441719fb81d57000cfc5ce7ddc118745ca41226858db67b
-
SSDEEP
49152:0NbfJJb4/WGdvbKJJb4/WGBJJb4/WGwJJb4/WGA0wr+jTZtaZ3Otfj7UCLiJJe4f:oXbbG5mbbGVbbGobbGABr+dCe6GC
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
Processes:
x360ce.exepid process 2952 x360ce.exe 2952 x360ce.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
x360ce.exepid process 2952 x360ce.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
x360ce.exepid process 2952 x360ce.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
x360ce.exepid process 2952 x360ce.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\ProgramData\X360CE\x360ce.Presets.xmlFilesize
182B
MD5f135ee37bdc2bee6bf638994e6a94f0b
SHA14760b3c9a1bc86f8b57891cedd01ba76a6552e8c
SHA2565a1e6a26433d1c1d5b72ecf67ca89dba3ef9a35192b23640911bbf232c21b458
SHA51294346c7cf89c39440635ce876cba9b56571f7c40372a13717b565d202258586714932a3fcafdd6bbf64b91cc4a924b686de3ab9c2f53afcd6b77e801c1f1d785
-
C:\Users\Admin\AppData\Local\Temp\CabA324.tmpFilesize
61KB
MD5f3441b8572aae8801c04f3060b550443
SHA14ef0a35436125d6821831ef36c28ffaf196cda15
SHA2566720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf
SHA5125ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9
-
C:\Users\Admin\AppData\Local\Temp\TarA375.tmpFilesize
163KB
MD59441737383d21192400eca82fda910ec
SHA1725e0d606a4fc9ba44aa8ffde65bed15e65367e4
SHA256bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5
SHA5127608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf
-
\Users\Admin\AppData\Local\Temp\xinput_X86.tmp.dllFilesize
123KB
MD55236623449893c0e1e98fc95f067fcff
SHA150b4f1e2340b7c7ad065b2111fc075b2cafe6231
SHA256301f0d831d95bb5c3b5c57f8a92a35211531b410fcf2bd08927a286b867142a3
SHA5129b94bddcb5e64bbf3649567f16a828588423873b60858d45c40155f36cc7f95d205f4e9b6cdc8ac2852240fdb6a67d0940c60e4f103cecbf118eae1438019c0c
-
\Users\Admin\AppData\Local\Temp\xinput_X86.tmp.dllFilesize
123KB
MD55236623449893c0e1e98fc95f067fcff
SHA150b4f1e2340b7c7ad065b2111fc075b2cafe6231
SHA256301f0d831d95bb5c3b5c57f8a92a35211531b410fcf2bd08927a286b867142a3
SHA5129b94bddcb5e64bbf3649567f16a828588423873b60858d45c40155f36cc7f95d205f4e9b6cdc8ac2852240fdb6a67d0940c60e4f103cecbf118eae1438019c0c
-
memory/2952-56-0x0000000000750000-0x000000000077C000-memory.dmpFilesize
176KB
-
memory/2952-59-0x0000000000810000-0x0000000000854000-memory.dmpFilesize
272KB
-
memory/2952-58-0x00000000055E0000-0x000000000566E000-memory.dmpFilesize
568KB
-
memory/2952-60-0x00000000004A0000-0x00000000004E0000-memory.dmpFilesize
256KB
-
memory/2952-61-0x00000000004A0000-0x00000000004E0000-memory.dmpFilesize
256KB
-
memory/2952-57-0x00000000004A0000-0x00000000004E0000-memory.dmpFilesize
256KB
-
memory/2952-0-0x0000000000D00000-0x0000000001014000-memory.dmpFilesize
3.1MB
-
memory/2952-1-0x0000000074530000-0x0000000074C1E000-memory.dmpFilesize
6.9MB
-
memory/2952-76-0x0000000074530000-0x0000000074C1E000-memory.dmpFilesize
6.9MB
-
memory/2952-77-0x00000000004A0000-0x00000000004E0000-memory.dmpFilesize
256KB
-
memory/2952-78-0x00000000004A0000-0x00000000004E0000-memory.dmpFilesize
256KB
-
memory/2952-79-0x00000000004A0000-0x00000000004E0000-memory.dmpFilesize
256KB