Overview
overview
5Static
static
3Plex-1.88....64.exe
windows7-x64
3Plex-1.88....64.exe
windows10-2004-x64
5web-client...A.json
windows7-x64
3web-client...A.json
windows10-2004-x64
3web-client...r.json
windows7-x64
3web-client...r.json
windows10-2004-x64
3web-client...e.json
windows7-x64
3web-client...e.json
windows10-2004-x64
3web-client...r.json
windows7-x64
3web-client...r.json
windows10-2004-x64
3web-client...u.json
windows7-x64
3web-client...u.json
windows10-2004-x64
3web-client...s.json
windows7-x64
3web-client...s.json
windows10-2004-x64
3web-client...t.json
windows7-x64
3web-client...t.json
windows10-2004-x64
3web-client...a.json
windows7-x64
3web-client...a.json
windows10-2004-x64
3web-client...o.json
windows7-x64
3web-client...o.json
windows10-2004-x64
3web-client...t.json
windows7-x64
3web-client...t.json
windows10-2004-x64
3web-client...y.json
windows7-x64
3web-client...y.json
windows10-2004-x64
3web-client...l.json
windows7-x64
3web-client...l.json
windows10-2004-x64
3web-client...o.json
windows7-x64
3web-client...o.json
windows10-2004-x64
3web-client...l.json
windows7-x64
3web-client...l.json
windows10-2004-x64
3web-client...R.json
windows7-x64
3web-client...R.json
windows10-2004-x64
3Analysis
-
max time kernel
117s -
max time network
200s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11-03-2024 17:43
Static task
static1
Behavioral task
behavioral1
Sample
Plex-1.88.1.96-c1c59fc1-x86_64.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Plex-1.88.1.96-c1c59fc1-x86_64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
web-client/translations/fr-CA.json
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
web-client/translations/fr-CA.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
web-client/translations/fr.json
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
web-client/translations/fr.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
web-client/translations/he.json
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
web-client/translations/he.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
web-client/translations/hr.json
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
web-client/translations/hr.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
web-client/translations/hu.json
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
web-client/translations/hu.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
web-client/translations/is.json
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
web-client/translations/is.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
web-client/translations/it.json
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
web-client/translations/it.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
web-client/translations/ja.json
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
web-client/translations/ja.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
web-client/translations/ko.json
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
web-client/translations/ko.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
web-client/translations/lt.json
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
web-client/translations/lt.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
web-client/translations/my.json
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
web-client/translations/my.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
web-client/translations/nl.json
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
web-client/translations/nl.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
web-client/translations/no.json
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
web-client/translations/no.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
web-client/translations/pl.json
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
web-client/translations/pl.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
web-client/translations/pt-BR.json
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
web-client/translations/pt-BR.json
Resource
win10v2004-20240226-en
General
-
Target
web-client/translations/he.json
-
Size
242KB
-
MD5
ec38722a0b42e53fb82115a5f37cfa64
-
SHA1
f56956227ff9ab316d538f88172d4ff0cd71536c
-
SHA256
3cb9978ac7f40b8973585bf0aa3cc18afba0f578118e21bfb9082a651add30ab
-
SHA512
02af1f52a9ad54d95768e966d4d8481b4eacc4a8110fbb107a8ca5c817e92d1ebb5f73c941aa7cf3d547ddd3b2ecd7fe0d331885e3f026e0c15b03e90ed60d99
-
SSDEEP
6144:LRqYjbvxi1BswKOkCp5sgBCxPhxxYrSwv5rMmZUBk7Olrwf:LRqYjbvxi1BswKOkCpygBCxPhP0Swv5j
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1128 OpenWith.exe