Overview
overview
7Static
static
7SecuriteIn...08.exe
windows7-x64
4SecuriteIn...08.exe
windows10-2004-x64
4$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...el.dll
windows7-x64
7$PLUGINSDI...el.dll
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows7-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
37z.dll
windows7-x64
37z.dll
windows10-2004-x64
3AFKJourney...er.exe
windows7-x64
1AFKJourney...er.exe
windows10-2004-x64
1AFKJourneyUninst.exe
windows7-x64
4AFKJourneyUninst.exe
windows10-2004-x64
4$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3CrashSight.dll
windows7-x64
1CrashSight.dll
windows10-2004-x64
1resource/lang/ar.js
windows7-x64
1resource/lang/ar.js
windows10-2004-x64
1resource/lang/de.js
windows7-x64
1resource/lang/de.js
windows10-2004-x64
1resource/lang/en.js
windows7-x64
1resource/lang/en.js
windows10-2004-x64
1resource/lang/es.js
windows7-x64
1resource/lang/es.js
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28-03-2024 00:42
Behavioral task
behavioral1
Sample
SecuriteInfo.com.TScope.Malware-Cryptor.SB.3839.14708.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.TScope.Malware-Cryptor.SB.3839.14708.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NsLauncher.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NsLauncher.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SelfDel.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SelfDel.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
7z.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
7z.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
AFKJourneyLauncher.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
AFKJourneyLauncher.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
AFKJourneyUninst.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
AFKJourneyUninst.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/NsLauncher.dll
Resource
win7-20240319-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/NsLauncher.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
CrashSight.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
CrashSight.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
resource/lang/ar.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
resource/lang/ar.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
resource/lang/de.js
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
resource/lang/de.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
resource/lang/en.js
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
resource/lang/en.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
resource/lang/es.js
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
resource/lang/es.js
Resource
win10v2004-20231215-en
General
-
Target
AFKJourneyLauncher.exe
-
Size
9.3MB
-
MD5
c9777369d7dc634ad965773f9c1295c2
-
SHA1
76251fae83f72959d903c18651eea6d1fa0719d2
-
SHA256
3c2706ee6b02d346ebd1cd61cfdebec1a541434f01accc3c67d1e1e8fb73ad0f
-
SHA512
0b53f63652de7956a29ad4666f91146c8fb522f565484f90247ebe4036cff9cd67593de12d596fa5f1a3f2be275038a2fb67e88164435e00ecc8a7433b85e022
-
SSDEEP
196608:gihcdFaUgfwkFXfwoJ/CrOE2yXeOE2yXokf:gikYfwUXfwo6rOE2yXeOE2yXokf
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
Processes:
AFKJourneyLauncher.exepid process 4228 AFKJourneyLauncher.exe 4228 AFKJourneyLauncher.exe 4228 AFKJourneyLauncher.exe 4228 AFKJourneyLauncher.exe 4228 AFKJourneyLauncher.exe 4228 AFKJourneyLauncher.exe 4228 AFKJourneyLauncher.exe 4228 AFKJourneyLauncher.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
AFKJourneyLauncher.exepid process 4228 AFKJourneyLauncher.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
AFKJourneyLauncher.exepid process 4228 AFKJourneyLauncher.exe