Overview
overview
7Static
static
7c17046e52f...2a.exe
windows7-x64
7c17046e52f...2a.exe
windows10-2004-x64
7$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3DTDJ_1.exe
windows7-x64
1DTDJ_1.exe
windows10-2004-x64
1Game.exe
windows7-x64
1Game.exe
windows10-2004-x64
1RGSS102J.dll
windows7-x64
3RGSS102J.dll
windows10-2004-x64
3uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7Analysis
-
max time kernel
118s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/03/2024, 19:43
Behavioral task
behavioral1
Sample
c17046e52fd81bc33c946b079424492a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c17046e52fd81bc33c946b079424492a.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
DTDJ_1.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
DTDJ_1.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Game.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Game.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
RGSS102J.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
RGSS102J.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
uninst.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
uninst.exe
Resource
win10v2004-20240226-en
General
-
Target
c17046e52fd81bc33c946b079424492a.exe
-
Size
2.6MB
-
MD5
c17046e52fd81bc33c946b079424492a
-
SHA1
d306b5b08a97eda93ddc22370fa33d8ebe8af135
-
SHA256
20744254800e89602224118e8361913395155488eb3ecf9f2fe0f59eb2ba169e
-
SHA512
4f6587f260e1c0844367f43ae5ef67fea5c69f922717c261d62b3727b39c4cc0a3b0ccfe301be7de15c2468489aa6a31a46e436e6b46fdb18c304e25c53811ac
-
SSDEEP
49152:eOswvG02BqNip8FhWMcEWkeVMSHBF8z+G742Rqu6wgLEBxX8hxSvTIONRz:eue02BnPMzheVx8p3qogLy8hbEz
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 2072 c17046e52fd81bc33c946b079424492a.exe 2072 c17046e52fd81bc33c946b079424492a.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2072 c17046e52fd81bc33c946b079424492a.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
518B
MD524e08b1f32d63119e6aeaf7f94b732ac
SHA1f7dcde76edf49245014914b97080cd604d6dd9f9
SHA256147a7ac827587e7f067a7097580d7ee8bc2212c0f54ed8967643feb2752cacd1
SHA512746fa2d89e20f1269331ea6f4c06cc59586883f8b2a03e8cd15db397c2de96984a48f9adbedbc64e17f91f737b84b1815dee7157c80a53bc942176a0696135c5
-
Filesize
3KB
MD59c3488b5e9655d1837c3963ecec33f70
SHA1f0fa9b4c29e75c6e4419c4633d09f2797aee2ef3
SHA25605ef4beb7fab9d04c1fb251874166fa2d73a34b4a7f2b145d37a2fd00c88979a
SHA5126af9f88d65d2279a71620f2a656062b1737b3a9a1692ed4e5887bdee891ce08d21c5c0b25ab3acbe6da9fe255dcd7f8a517c2751e73dc56add216740c945e4a7
-
Filesize
14KB
MD5b18dfaded8f6d2380fdfd8f6b6969211
SHA1969fa0e906240ab1123254feeb833c275626cf76
SHA256747d0222b652dbfc85e0de4f8486473662d325a55e32c7eacb91e53e37ceba58
SHA51225fb09b8657997d31e61c908f1cd08357c1a1b68bbb1ba377e87b6a3eb347a2ef96c1a771b6c4332853abb33728c55c83efa73df5da03f3dfc132f8a69a2886c