Overview
overview
7Static
static
3mkvtoolnix...up.exe
windows7-x64
7mkvtoolnix...up.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3cygz.dll
windows7-x64
3cygz.dll
windows10-2004-x64
3doc/base64tool.html
windows7-x64
1doc/base64tool.html
windows10-2004-x64
1doc/mkvextract.html
windows7-x64
1doc/mkvextract.html
windows10-2004-x64
1doc/mkvinfo.html
windows7-x64
1doc/mkvinfo.html
windows10-2004-x64
1doc/mkvmerge-gui.html
windows7-x64
1doc/mkvmerge-gui.html
windows10-2004-x64
1doc/mkvmerge.html
windows7-x64
1doc/mkvmerge.html
windows10-2004-x64
1doc/mmg.html
windows7-x64
1doc/mmg.html
windows10-2004-x64
1libcharset.dll
windows7-x64
1libcharset.dll
windows10-2004-x64
1libebml.dll
windows7-x64
3libebml.dll
windows10-2004-x64
3libiconv.dll
windows7-x64
3libiconv.dll
windows10-2004-x64
3libmatroska.dll
windows7-x64
1libmatroska.dll
windows10-2004-x64
3mkvextract.exe
windows7-x64
1mkvextract.exe
windows10-2004-x64
1mkvinfo.exe
windows7-x64
1mkvinfo.exe
windows10-2004-x64
1Analysis
-
max time kernel
129s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/04/2024, 00:59
Static task
static1
Behavioral task
behavioral1
Sample
mkvtoolnix-unicode-2.4.1-setup.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
mkvtoolnix-unicode-2.4.1-setup.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240319-en
Behavioral task
behavioral7
Sample
cygz.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
cygz.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
doc/base64tool.html
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
doc/base64tool.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
doc/mkvextract.html
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
doc/mkvextract.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
doc/mkvinfo.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
doc/mkvinfo.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
doc/mkvmerge-gui.html
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
doc/mkvmerge-gui.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
doc/mkvmerge.html
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
doc/mkvmerge.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
doc/mmg.html
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
doc/mmg.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
libcharset.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
libcharset.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
libebml.dll
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
libebml.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
libiconv.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
libiconv.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
libmatroska.dll
Resource
win7-20240319-en
Behavioral task
behavioral28
Sample
libmatroska.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
mkvextract.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
mkvextract.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
mkvinfo.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
mkvinfo.exe
Resource
win10v2004-20231215-en
General
-
Target
doc/mkvextract.html
-
Size
25KB
-
MD5
acb94d50dc870ba8bde116f33f515df7
-
SHA1
e9d6f2d44db28099a46120ab535fb2fdae9ea919
-
SHA256
9bf117719ffdd7764c832d756354265e7d4dc4270200a9010cf8e4a16a89c445
-
SHA512
9b3a37c2d82ed3dbc67991c71784a98388c31f7e52d52ba14f77f8d9920ee76bdfc0ab8f72ff26249b78cb156a2ca9ca27498014cbb1f5beb9cd0a702cc6aba3
-
SSDEEP
768:l2YQoUxOP8I1W3GOv5+dtrH6FvpxTzN9jJ1:0l3cP8I1WWgsJ4fRd
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\doc\mkvextract.html1⤵PID:5056
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=5440 --field-trial-handle=2256,i,9172343514068348080,519219714517961765,262144 --variations-seed-version /prefetch:11⤵PID:3868
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4784 --field-trial-handle=2256,i,9172343514068348080,519219714517961765,262144 --variations-seed-version /prefetch:11⤵PID:1524
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5288 --field-trial-handle=2256,i,9172343514068348080,519219714517961765,262144 --variations-seed-version /prefetch:81⤵PID:3120
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5452 --field-trial-handle=2256,i,9172343514068348080,519219714517961765,262144 --variations-seed-version /prefetch:11⤵PID:2752
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=3836 --field-trial-handle=2256,i,9172343514068348080,519219714517961765,262144 --variations-seed-version /prefetch:81⤵PID:2732