Overview
overview
3Static
static
3ac079d9c32...2c.exe
windows7-x64
3ac079d9c32...2c.exe
windows10-2004-x64
3$PLUGINSDI...if.dll
windows7-x64
3$PLUGINSDI...if.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$SMSTARTUP...��.exe
windows7-x64
1$SMSTARTUP...��.exe
windows10-2004-x64
1$TEMP/Plug...er.exe
windows7-x64
1$TEMP/Plug...er.exe
windows10-2004-x64
1EncodeBnd.exe
windows7-x64
1EncodeBnd.exe
windows10-2004-x64
1KwMusic.exe
windows7-x64
KwMusic.exe
windows10-2004-x64
run.exe
windows7-x64
1run.exe
windows10-2004-x64
1Analysis
-
max time kernel
97s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/02/2024, 13:48
Static task
static1
Behavioral task
behavioral1
Sample
ac079d9c3292260e761f4268c64c3e2c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac079d9c3292260e761f4268c64c3e2c.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AnimGif.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AnimGif.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$SMSTARTUP/ֺ.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$SMSTARTUP/ֺ.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$TEMP/PluginNotifier.exe
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$TEMP/PluginNotifier.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
EncodeBnd.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
EncodeBnd.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
KwMusic.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
KwMusic.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
run.exe
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
run.exe
Resource
win10v2004-20240226-en
General
-
Target
ac079d9c3292260e761f4268c64c3e2c.exe
-
Size
522KB
-
MD5
ac079d9c3292260e761f4268c64c3e2c
-
SHA1
aa3526fc20da92a03531fb08cac1c44f140519da
-
SHA256
e6b6ac6f9a367714c4b78388c605313ab19b99aff5d0ec27d109bae08dfb66a5
-
SHA512
dc9f332aba9af0921687c79691d5eb250b02a50618d7042f39d2b43ab3cf780bc57b89566fa270e2dd393e4668e621c4dc9f15f0a8d997955d4ed826fedf0de5
-
SSDEEP
12288:guM/ZhJeBg1rS/RnicoaEWqkYlwUNqALnhEMEz6WZ0XmjIP:tMFW/RjopWqkYOUQOuXmP
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).