Overview
overview
7Static
static
3New folder.zip
windows7-x64
1New folder.zip
windows10-2004-x64
1New folder...2R.nfo
windows7-x64
1New folder...2R.nfo
windows10-2004-x64
1New folder...en.exe
windows7-x64
7New folder...en.exe
windows10-2004-x64
7$TEMP/BASSMOD.dll
windows7-x64
1$TEMP/BASSMOD.dll
windows10-2004-x64
1$TEMP/R2RJUCE.dll
windows7-x64
3$TEMP/R2RJUCE.dll
windows10-2004-x64
1$TEMP/bgm.xm
windows7-x64
1$TEMP/bgm.xm
windows10-2004-x64
1$TEMP/keygen.exe
windows7-x64
1$TEMP/keygen.exe
windows10-2004-x64
1New folder...2.1.7z
windows7-x64
3New folder...2.1.7z
windows10-2004-x64
7Setup Port....1.exe
windows7-x64
7Setup Port....1.exe
windows10-2004-x64
7New folder...st.zip
windows7-x64
1New folder...st.zip
windows10-2004-x64
1Tone2 Nano...l.html
windows7-x64
1Tone2 Nano...l.html
windows10-2004-x64
1Tone2 Nano...it.exe
windows7-x64
3Tone2 Nano...it.exe
windows10-2004-x64
3Tone2 Nano...it.exe
windows7-x64
3Tone2 Nano...it.exe
windows10-2004-x64
3Tone2 Nano....2.txt
windows7-x64
1Tone2 Nano....2.txt
windows10-2004-x64
1Analysis
-
max time kernel
592s -
max time network
602s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/03/2024, 04:24
Static task
static1
Behavioral task
behavioral1
Sample
New folder.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
New folder.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
New folder/Output.Portal.v1.2.1.Incl.Keygen-R2R/R2R.nfo
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
New folder/Output.Portal.v1.2.1.Incl.Keygen-R2R/R2R.nfo
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
New folder/Output.Portal.v1.2.1.Incl.Keygen-R2R/R2R/Output_CR_KeyGen.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
New folder/Output.Portal.v1.2.1.Incl.Keygen-R2R/R2R/Output_CR_KeyGen.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$TEMP/BASSMOD.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$TEMP/R2RJUCE.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$TEMP/R2RJUCE.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$TEMP/bgm.xm
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
$TEMP/bgm.xm
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$TEMP/keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$TEMP/keygen.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
New folder/Output.Portal.v1.2.1.Incl.Keygen-R2R/Setup Portal v1.2.1.7z
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
New folder/Output.Portal.v1.2.1.Incl.Keygen-R2R/Setup Portal v1.2.1.7z
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Setup Portal v1.2.1.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Setup Portal v1.2.1.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
New folder/Tone2_NanoHost.zip
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
New folder/Tone2_NanoHost.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Tone2 NanoHost v1.2.2/Manual.html
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Tone2 NanoHost v1.2.2/Manual.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Tone2 NanoHost v1.2.2/NanoHost32bit.exe
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
Tone2 NanoHost v1.2.2/NanoHost32bit.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Tone2 NanoHost v1.2.2/NanoHost64bit.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Tone2 NanoHost v1.2.2/NanoHost64bit.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
Tone2 NanoHost v1.2.2/what's new in v1.2.2.txt
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Tone2 NanoHost v1.2.2/what's new in v1.2.2.txt
Resource
win10v2004-20240226-en
General
-
Target
Tone2 NanoHost v1.2.2/Manual.html
-
Size
949B
-
MD5
bdd5643b9678fab25edcb25c9dd26fd3
-
SHA1
00dedf5f7218b90da6b77cc58fec0af727085f66
-
SHA256
b41d0747f19f53767653460ef13fbc0239b8a47f780d58a1a89bb83edacd8c9c
-
SHA512
0855b755dcdc87d734c85b35831cb3b4fe46007f3b89af582ff2c5310244fefe95b67bc51d0dc67be9c28f1e2b9703afb4f35114836619d6897c451fbda3169c
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\Tone2 NanoHost v1.2.2\Manual.html1⤵PID:4912
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=3680 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:11⤵PID:2620
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=3816 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:11⤵PID:4968
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=120 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:81⤵PID:4616
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5452 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:11⤵PID:436
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=5752 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:11⤵PID:1956
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --mojo-platform-channel-handle=5488 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:11⤵PID:1880
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --mojo-platform-channel-handle=6204 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:11⤵PID:1452
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=3724 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:81⤵PID:2108
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=4792 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:81⤵PID:4200
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4888 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:81⤵PID:2204
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5324 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:81⤵PID:4056