Overview
overview
3Static
static
1ваня3�...lc.zip
windows7-x64
1ваня3�...lc.zip
windows10-2004-x64
1DLC/dlc040...40.dlc
windows7-x64
3DLC/dlc040...40.dlc
windows10-2004-x64
3DLC/dlc040...ry.gfx
windows7-x64
3DLC/dlc040...ry.gfx
windows10-2004-x64
3DLC/dlc040...es.gfx
windows7-x64
3DLC/dlc040...es.gfx
windows10-2004-x64
3DLC/dlc040...ks.gfx
windows7-x64
3DLC/dlc040...ks.gfx
windows10-2004-x64
3DLC/dlc040...es.gfx
windows7-x64
3DLC/dlc040...es.gfx
windows10-2004-x64
3DLC/dlc040....asset
windows7-x64
3DLC/dlc040....asset
windows10-2004-x64
3DLC/dlc040....asset
windows7-x64
3DLC/dlc040....asset
windows10-2004-x64
3DLC/dlc040....asset
windows7-x64
3DLC/dlc040....asset
windows10-2004-x64
3DLC/dlc040....asset
windows7-x64
3DLC/dlc040....asset
windows10-2004-x64
3DLC/dlc040....asset
windows7-x64
3DLC/dlc040....asset
windows10-2004-x64
3DLC/dlc040....asset
windows7-x64
3DLC/dlc040....asset
windows10-2004-x64
1DLC/dlc040...ns.txt
windows7-x64
1DLC/dlc040...ns.txt
windows10-2004-x64
1DLC/dlc040...ns.txt
windows7-x64
1DLC/dlc040...ns.txt
windows10-2004-x64
1DLC/dlc040...ll.dds
windows7-x64
3DLC/dlc040...ll.dds
windows10-2004-x64
3DLC/dlc040...ll.dds
windows7-x64
3DLC/dlc040...ll.dds
windows10-2004-x64
3Analysis
-
max time kernel
139s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 15:39
Static task
static1
Behavioral task
behavioral1
Sample
ваня3вНОВОЕdlc.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ваня3вНОВОЕdlc.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
DLC/dlc040_trial_of_allegiance/dlc040.dlc
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
DLC/dlc040_trial_of_allegiance/dlc040.dlc
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_meshes_infantry.gfx
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_meshes_infantry.gfx
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_meshes_planes.gfx
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_meshes_planes.gfx
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_meshes_tanks.gfx
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_meshes_tanks.gfx
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_meshes_vehicles.gfx
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_meshes_vehicles.gfx
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_artillery.asset
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_artillery.asset
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_cavalry.asset
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_cavalry.asset
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_infantry.asset
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_infantry.asset
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_planes.asset
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_planes.asset
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_tanks.asset
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_tanks.asset
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_vehicles.asset
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
DLC/dlc040_trial_of_allegiance/gfx/entities/TOA_units_vehicles.asset
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
DLC/dlc040_trial_of_allegiance/gfx/interface/equipmentdesigner/graphic_db/01_trial_of_allegiance_plane_icons.txt
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
DLC/dlc040_trial_of_allegiance/gfx/interface/equipmentdesigner/graphic_db/01_trial_of_allegiance_plane_icons.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
DLC/dlc040_trial_of_allegiance/gfx/interface/equipmentdesigner/graphic_db/01_trial_of_allegiance_tank_icons.txt
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
DLC/dlc040_trial_of_allegiance/gfx/interface/equipmentdesigner/graphic_db/01_trial_of_allegiance_tank_icons.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
DLC/dlc040_trial_of_allegiance/gfx/interface/ideas/portrait_ARG_alberto_gilbert_small.dds
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
DLC/dlc040_trial_of_allegiance/gfx/interface/ideas/portrait_ARG_alberto_gilbert_small.dds
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
DLC/dlc040_trial_of_allegiance/gfx/interface/ideas/portrait_ARG_antonio_parodi_small.dds
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
DLC/dlc040_trial_of_allegiance/gfx/interface/ideas/portrait_ARG_antonio_parodi_small.dds
Resource
win10v2004-20240226-en
General
-
Target
DLC/dlc040_trial_of_allegiance/dlc040.dlc
-
Size
285B
-
MD5
9f78250622df62deba8840946363e8d9
-
SHA1
f6425ef1819df9083bb84ffaa930e5e8c91c8764
-
SHA256
0dfd82e03b933c5aabc0c8a7a19cb600bf0089f78d7548b3441be42a8d8b43a2
-
SHA512
75151141e888634c4a0837b5e5c358c15016718ae23703430091262fb9d5ffd92aad987f43714e74fe918677f5b608b57d5d69d12f0224ae9d2140a8c97ca794
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2727153400-192325109-1870347593-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4996 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\DLC\dlc040_trial_of_allegiance\dlc040.dlc1⤵
- Modifies registry class
PID:2364
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4996