Overview
overview
10Static
static
4VCDS-PCI-1...er.exe
windows7-x64
10VCDS-PCI-1...er.exe
windows10-2004-x64
7CSVConv.exe
windows7-x64
1CSVConv.exe
windows10-2004-x64
1LCode.exe
windows7-x64
1LCode.exe
windows10-2004-x64
1TDIGraph.exe
windows7-x64
1TDIGraph.exe
windows10-2004-x64
1VCDS.exe
windows7-x64
5VCDS.exe
windows10-2004-x64
5VCScope.exe
windows7-x64
1VCScope.exe
windows10-2004-x64
1dpinst.exe
windows7-x64
4dpinst.exe
windows10-2004-x64
4Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15-04-2024 18:05
Behavioral task
behavioral1
Sample
VCDS-PCI-15071-Installer.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
VCDS-PCI-15071-Installer.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
CSVConv.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
CSVConv.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
LCode.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
LCode.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
TDIGraph.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
TDIGraph.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
VCDS.exe
Resource
win7-20240319-en
Behavioral task
behavioral10
Sample
VCDS.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
VCScope.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
VCScope.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
dpinst.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
dpinst.exe
Resource
win10v2004-20240412-en
General
-
Target
CSVConv.exe
-
Size
216KB
-
MD5
0a9ff56e1086ec3ab9d7b5dad34639f9
-
SHA1
38920bb3f0f557026c8c2a935585c47e37ef826f
-
SHA256
b8a7713039c57d7c7ab2ceab9de4c6ef1d6b6e08fc1281b29e561c7ae6fa0760
-
SHA512
b1456a45949ef282c6ddef6fe91c939572b0f23693581b41c59decf0e41a1f57ea4fb2e39b7fbdf18d5abe4949ca4161e22ec7101c075b99c450df77565a68bd
-
SSDEEP
3072:PtvmswDljy1WY1zYfrLsoEDy9CHuUVLdEvYxDynGQIfwxiVupktnA9SDCA:leswhy11zYfHsRqQJdEvYxWGQxBGA9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2056 CSVConv.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2056 CSVConv.exe 2056 CSVConv.exe