Overview
overview
3Static
static
1HORIZON_VAULT.zip
windows11-21h2-x64
1100-+.cfg
windows11-21h2-x64
3110.cfg
windows11-21h2-x64
3120.cfg
windows11-21h2-x64
3130.cfg
windows11-21h2-x64
3140.cfg
windows11-21h2-x64
3150.cfg
windows11-21h2-x64
3200 PING.cfg
windows11-21h2-x64
350 ping blatant.cfg
windows11-21h2-x64
350 ping se...it.cfg
windows11-21h2-x64
370.cfg
windows11-21h2-x64
390.cfg
windows11-21h2-x64
3@@@cocacw.cfg
windows11-21h2-x64
3@@cocacw.cfg
windows11-21h2-x64
3BLOODINHERMOUTH.cfg
windows11-21h2-x64
3HIGH PING AF.cfg
windows11-21h2-x64
3UW.cfg
windows11-21h2-x64
3WOW.cfg
windows11-21h2-x64
3aaa.cfg
windows11-21h2-x64
3cocacw best cfgs.cfg
windows11-21h2-x64
3cocacwaa.cfg
windows11-21h2-x64
3config plug.cfg
windows11-21h2-x64
for a nigg... 2.cfg
windows11-21h2-x64
3for a nigg... 3.cfg
windows11-21h2-x64
3for a nigg...xy.cfg
windows11-21h2-x64
3ggs.cfg
windows11-21h2-x64
3low ping.cfg
windows11-21h2-x64
3ue.cfg
windows11-21h2-x64
3uhuh.cfg
windows11-21h2-x64
3urlegitscfgsir.cfg
windows11-21h2-x64
3yeye.cfg
windows11-21h2-x64
3yourcfg.cfg
windows11-21h2-x64
3Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system -
submitted
28-03-2024 16:35
Static task
static1
Behavioral task
behavioral1
Sample
HORIZON_VAULT.zip
Resource
win11-20240221-en
Behavioral task
behavioral2
Sample
100-+.cfg
Resource
win11-20240221-en
Behavioral task
behavioral3
Sample
110.cfg
Resource
win11-20240221-en
Behavioral task
behavioral4
Sample
120.cfg
Resource
win11-20240221-en
Behavioral task
behavioral5
Sample
130.cfg
Resource
win11-20240214-en
Behavioral task
behavioral6
Sample
140.cfg
Resource
win11-20240221-en
Behavioral task
behavioral7
Sample
150.cfg
Resource
win11-20240221-en
Behavioral task
behavioral8
Sample
200 PING.cfg
Resource
win11-20240221-en
Behavioral task
behavioral9
Sample
50 ping blatant.cfg
Resource
win11-20240221-en
Behavioral task
behavioral10
Sample
50 ping semi legit.cfg
Resource
win11-20240221-en
Behavioral task
behavioral11
Sample
70.cfg
Resource
win11-20240221-en
Behavioral task
behavioral12
Sample
90.cfg
Resource
win11-20240221-en
Behavioral task
behavioral13
Sample
@@@cocacw.cfg
Resource
win11-20240221-en
Behavioral task
behavioral14
Sample
@@cocacw.cfg
Resource
win11-20240319-en
Behavioral task
behavioral15
Sample
BLOODINHERMOUTH.cfg
Resource
win11-20240221-en
Behavioral task
behavioral16
Sample
HIGH PING AF.cfg
Resource
win11-20240221-en
Behavioral task
behavioral17
Sample
UW.cfg
Resource
win11-20240221-en
Behavioral task
behavioral18
Sample
WOW.cfg
Resource
win11-20240221-en
Behavioral task
behavioral19
Sample
aaa.cfg
Resource
win11-20240221-en
Behavioral task
behavioral20
Sample
cocacw best cfgs.cfg
Resource
win11-20240214-en
Behavioral task
behavioral21
Sample
cocacwaa.cfg
Resource
win11-20240221-en
Behavioral task
behavioral22
Sample
config plug.cfg
Resource
win11-20240221-en
Behavioral task
behavioral23
Sample
for a nigga named oxy 2.cfg
Resource
win11-20240319-en
Behavioral task
behavioral24
Sample
for a nigga named oxy 3.cfg
Resource
win11-20240221-en
Behavioral task
behavioral25
Sample
for a nigga named oxy.cfg
Resource
win11-20240221-en
Behavioral task
behavioral26
Sample
ggs.cfg
Resource
win11-20240221-en
Behavioral task
behavioral27
Sample
low ping.cfg
Resource
win11-20240214-en
Behavioral task
behavioral28
Sample
ue.cfg
Resource
win11-20240221-en
Behavioral task
behavioral29
Sample
uhuh.cfg
Resource
win11-20240221-en
Behavioral task
behavioral30
Sample
urlegitscfgsir.cfg
Resource
win11-20240221-en
Behavioral task
behavioral31
Sample
yeye.cfg
Resource
win11-20240221-en
Behavioral task
behavioral32
Sample
yourcfg.cfg
Resource
win11-20240221-en
General
-
Target
100-+.cfg
-
Size
354B
-
MD5
6c0cd33c0f580f9c1c8ff2eddddd274f
-
SHA1
e62cc71e35e064660168a2996a218b42245713aa
-
SHA256
685b85ce0c0c91b0355f147b855c5a55a5abec3360f3c521f85b3b1fd8c479f6
-
SHA512
2001243ffd172cbe913456d125f47036c0dbd273e1ae7e2475d02c95c17407cb11850f47c8653df911c4de3f4aa98a5f480f15d2bdd162ef420841757039dded
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3116 OpenWith.exe