Overview
overview
7Static
static
3Setup.rar
windows7-x64
3Setup.rar
windows10-2004-x64
7Setup/Setup.exe
windows7-x64
3Setup/Setup.exe
windows10-2004-x64
3Setup/auto-update.dll
windows7-x64
1Setup/auto-update.dll
windows10-2004-x64
1Setup/d3dc...47.dll
windows7-x64
1Setup/d3dc...47.dll
windows10-2004-x64
1Setup/libG1LESv2.dll
windows7-x64
1Setup/libG1LESv2.dll
windows10-2004-x64
1Setup/locales/ca.pak
windows7-x64
3Setup/locales/ca.pak
windows10-2004-x64
3Setup/locales/da.pak
windows7-x64
3Setup/locales/da.pak
windows10-2004-x64
3Setup/loca...GB.pak
windows7-x64
3Setup/loca...GB.pak
windows10-2004-x64
3Setup/loca...US.pak
windows7-x64
3Setup/loca...US.pak
windows10-2004-x64
3Setup/loca...19.pak
windows7-x64
3Setup/loca...19.pak
windows10-2004-x64
3Setup/locales/fa.pak
windows7-x64
3Setup/locales/fa.pak
windows10-2004-x64
3Setup/locales/fi.pak
windows7-x64
3Setup/locales/fi.pak
windows10-2004-x64
3Setup/locales/fil.pak
windows7-x64
3Setup/locales/fil.pak
windows10-2004-x64
3Setup/locales/gu.pak
windows7-x64
3Setup/locales/gu.pak
windows10-2004-x64
3Setup/locales/he.pak
windows7-x64
3Setup/locales/he.pak
windows10-2004-x64
3Setup/locales/hr.pak
windows7-x64
3Setup/locales/hr.pak
windows10-2004-x64
3Analysis
-
max time kernel
92s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
02-02-2024 16:15
Static task
static1
Behavioral task
behavioral1
Sample
Setup.rar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Setup.rar
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Setup/Setup.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Setup/Setup.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Setup/auto-update.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Setup/auto-update.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Setup/d3dcompiler_47.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
Setup/d3dcompiler_47.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
Setup/libG1LESv2.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
Setup/libG1LESv2.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
Setup/locales/ca.pak
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Setup/locales/ca.pak
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
Setup/locales/da.pak
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
Setup/locales/da.pak
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
Setup/locales/en-GB.pak
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
Setup/locales/en-GB.pak
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
Setup/locales/en-US.pak
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
Setup/locales/en-US.pak
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
Setup/locales/es-419.pak
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
Setup/locales/es-419.pak
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
Setup/locales/fa.pak
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
Setup/locales/fa.pak
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
Setup/locales/fi.pak
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
Setup/locales/fi.pak
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
Setup/locales/fil.pak
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
Setup/locales/fil.pak
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
Setup/locales/gu.pak
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
Setup/locales/gu.pak
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
Setup/locales/he.pak
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
Setup/locales/he.pak
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
Setup/locales/hr.pak
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
Setup/locales/hr.pak
Resource
win10v2004-20231215-en
General
-
Target
Setup/locales/fi.pak
-
Size
338KB
-
MD5
aac0554a39bb1ae91e2ed4246e04c30e
-
SHA1
031785024765eda1534fd9504eccbe1b471ae618
-
SHA256
df8cefa4831fc2fdf817dd6d49a6373edee4f51f23cf990c690e72ce348f69bb
-
SHA512
a6afc9464047c75157dcb8ece086c1c5bf4dccb48d33da24e35c43110f300cfea503c4cca093f3d4bcc7a0fdcb306138da5be288ef646881b625751e40d93689
-
SSDEEP
6144:3pR/2jxpvwhnVgQsm3aOE/8aCEELsR5w5jSH4EJ18GWU/8nZRuX1wr2:vOnvoG8a35w5+H4EJ18GWU/o2
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1168293393-3419776239-306423207-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1168293393-3419776239-306423207-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4172 OpenWith.exe