Overview
overview
7Static
static
3XMT2_Win_S...28.exe
windows7-x64
7XMT2_Win_S...28.exe
windows10-2004-x64
7res/driver...09.dll
windows7-x64
1res/driver...09.dll
windows10-2004-x64
1res/driver...09.dll
windows7-x64
1res/driver...09.dll
windows10-2004-x64
1res/driver...r2.dll
windows7-x64
4res/driver...r2.dll
windows10-2004-x64
3res/driver...09.dll
windows7-x64
1res/driver...09.dll
windows10-2004-x64
1res/driver...09.dll
windows7-x64
1res/driver...09.dll
windows10-2004-x64
1res/driver...r2.dll
windows7-x64
4res/driver...r2.dll
windows10-2004-x64
1res/driver...09.dll
windows7-x64
1res/driver...09.dll
windows10-2004-x64
1res/driver...09.dll
windows7-x64
1res/driver...09.dll
windows10-2004-x64
1res/driver...r2.dll
windows7-x64
3res/driver...r2.dll
windows10-2004-x64
3res/driver...df.exe
windows7-x64
7res/driver...df.exe
windows10-2004-x64
7res/driver...11.exe
windows7-x64
7res/driver...11.exe
windows10-2004-x64
7res/driver...07.dll
windows7-x64
4res/driver...07.dll
windows10-2004-x64
4res/driver...07.dll
windows7-x64
1res/driver...07.dll
windows10-2004-x64
1res/driver...er.dll
windows7-x64
4res/driver...er.dll
windows10-2004-x64
4res/driver...07.dll
windows7-x64
4res/driver...07.dll
windows10-2004-x64
4Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
08-03-2024 13:34
Static task
static1
Behavioral task
behavioral1
Sample
XMT2_Win_Setup_20.7.28.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
XMT2_Win_Setup_20.7.28.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
res/driver/google/win10/i386/WUDFUpdate_01009.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
res/driver/google/win10/i386/WUDFUpdate_01009.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
res/driver/google/win10/i386/WdfCoInstaller01009.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
res/driver/google/win10/i386/WdfCoInstaller01009.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
res/driver/google/win10/i386/winusbcoinstaller2.dll
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral8
Sample
res/driver/google/win10/i386/winusbcoinstaller2.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
res/driver/google/win8/amd64/WUDFUpdate_01009.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral10
Sample
res/driver/google/win8/amd64/WUDFUpdate_01009.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
res/driver/google/win8/amd64/WdfCoInstaller01009.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral12
Sample
res/driver/google/win8/amd64/WdfCoInstaller01009.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
res/driver/google/win8/amd64/winusbcoinstaller2.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral14
Sample
res/driver/google/win8/amd64/winusbcoinstaller2.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
res/driver/google/win8/i386/WUDFUpdate_01009.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral16
Sample
res/driver/google/win8/i386/WUDFUpdate_01009.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
res/driver/google/win8/i386/WdfCoInstaller01009.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral18
Sample
res/driver/google/win8/i386/WdfCoInstaller01009.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
res/driver/google/win8/i386/winusbcoinstaller2.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral20
Sample
res/driver/google/win8/i386/winusbcoinstaller2.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
res/driver/microsoft/umdf.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
res/driver/microsoft/umdf.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
res/driver/microsoft/wmfdist11.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral24
Sample
res/driver/microsoft/wmfdist11.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
res/driver/nvidia/amd64/WUDFUpdate_01007.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral26
Sample
res/driver/nvidia/amd64/WUDFUpdate_01007.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
res/driver/nvidia/amd64/WdfCoInstaller01007.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral28
Sample
res/driver/nvidia/amd64/WdfCoInstaller01007.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
res/driver/nvidia/amd64/WinUSBCoInstaller.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral30
Sample
res/driver/nvidia/amd64/WinUSBCoInstaller.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
res/driver/nvidia/i386/WUDFUpdate_01007.dll
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral32
Sample
res/driver/nvidia/i386/WUDFUpdate_01007.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
General
-
Target
res/driver/nvidia/amd64/WinUSBCoInstaller.dll
-
Size
691KB
-
MD5
4d96beff088ba6ab48fd3775f87c3438
-
SHA1
e70a93f2f4045e650643e9691e61f38c4ce910fa
-
SHA256
e48a4651f9f691d1f0c115f50f8e2e2baf18107cc766a0cf0a1c17ef8f6e82db
-
SHA512
7cbd4a89769e2608fc3a4d59e5afb0e55b636087736340eacefefb11513e0692ef6a2f49ca405f4a6bc5f67abf0f3a6a437662e6c76a64f79f749b4adad87cf9
-
SSDEEP
12288:4UTTsjKKkybPzVKtskjbxeV50hCSXDWkEupXMMhogeb0ORUtp2Z5UpHK74r:xTQ2KkybLVanjFhCSX3EUX9hPy0IUtkK
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
description ioc Process File opened for modification C:\Windows\setupact.log rundll32.exe File opened for modification C:\Windows\setuperr.log rundll32.exe