Overview
overview
3Static
static
38b1d9cd042...3c.exe
windows7-x64
38b1d9cd042...3c.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$R0.dll
windows7-x64
1$R0.dll
windows10-2004-x64
1$TEMP/CloudAssist.exe
windows7-x64
1$TEMP/CloudAssist.exe
windows10-2004-x64
1$TEMP/CloudServer.exe
windows7-x64
1$TEMP/CloudServer.exe
windows10-2004-x64
1$TEMP/Clou...ee.exe
windows7-x64
1$TEMP/Clou...ee.exe
windows10-2004-x64
17zxr.dll
windows7-x64
17zxr.dll
windows10-2004-x64
1CloudAssist.exe
windows7-x64
1CloudAssist.exe
windows10-2004-x64
1CloudEBookReader.exe
windows7-x64
3CloudEBookReader.exe
windows10-2004-x64
3CloudFun.dll
windows7-x64
1CloudFun.dll
windows10-2004-x64
1CloudFun2.dll
windows7-x64
1CloudFun2.dll
windows10-2004-x64
1CloudServer.exe
windows7-x64
CloudServer.exe
windows10-2004-x64
GdiPlus.dll
windows7-x64
1GdiPlus.dll
windows10-2004-x64
1LongRADrv.sys
windows7-x64
1LongRADrv.sys
windows10-2004-x64
1LongRADrv2K.sys
windows7-x64
1LongRADrv2K.sys
windows10-2004-x64
1LongRAShell.exe
windows7-x64
1LongRAShell.exe
windows10-2004-x64
1Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
03/02/2024, 02:07
Static task
static1
Behavioral task
behavioral1
Sample
8b1d9cd042c4f17030881d1fadc6cd3c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b1d9cd042c4f17030881d1fadc6cd3c.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$R0.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$R0.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$TEMP/CloudAssist.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$TEMP/CloudAssist.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$TEMP/CloudServer.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$TEMP/CloudServer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$TEMP/CloudTool-uusee.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$TEMP/CloudTool-uusee.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
7zxr.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
7zxr.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
CloudAssist.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
CloudAssist.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
CloudEBookReader.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
CloudEBookReader.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
CloudFun.dll
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
CloudFun.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
CloudFun2.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
CloudFun2.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
CloudServer.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
CloudServer.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
GdiPlus.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
GdiPlus.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
LongRADrv.sys
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
LongRADrv.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
LongRADrv2K.sys
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
LongRADrv2K.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
LongRAShell.exe
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
LongRAShell.exe
Resource
win10v2004-20231215-en
General
-
Target
8b1d9cd042c4f17030881d1fadc6cd3c.exe
-
Size
1.7MB
-
MD5
8b1d9cd042c4f17030881d1fadc6cd3c
-
SHA1
158ea5baefe6b12d217900871a8ec8774397e045
-
SHA256
dc9004debeedaf630fc537b2200ce3a742a45af5478cecf2fccdd35ffa15cac5
-
SHA512
306d9804616d04c9d832a4d1b75aa9c120dc6ad38fedc23c014f54440fec3c715f758f600d279674a043c5847bf8318b50d7fe258b304c978d7c3f470db860d5
-
SSDEEP
49152:te3T0qUm3ZxLTqW1Xnmg548HORd3qHyQLymsPLr:EPUUTquXmg5482IyaymqLr
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).