Overview
overview
7Static
static
3LUXONIX Pu....4.exe
windows7-x64
7LUXONIX Pu....4.exe
windows10-2004-x64
7$PLUGINSDI...al.ini
windows7-x64
1$PLUGINSDI...al.ini
windows10-2004-x64
1$PLUGINSDI...er.bmp
windows7-x64
3$PLUGINSDI...er.bmp
windows10-2004-x64
7$PLUGINSDI...rd.bmp
windows7-x64
3$PLUGINSDI...rd.bmp
windows10-2004-x64
7000 GM Normal.pth
windows7-x64
3000 GM Normal.pth
windows10-2004-x64
3000 GM Normal.smp
windows7-x64
3000 GM Normal.smp
windows10-2004-x64
3000 GM Normal.wvt
windows7-x64
3000 GM Normal.wvt
windows10-2004-x64
3001 GM Rhythm.pth
windows7-x64
3001 GM Rhythm.pth
windows10-2004-x64
3001 GM Rhythm.smp
windows7-x64
3001 GM Rhythm.smp
windows10-2004-x64
3001 GM Rhythm.wvt
windows7-x64
3001 GM Rhythm.wvt
windows10-2004-x64
3010 Factor...dy.smp
windows7-x64
3010 Factor...dy.smp
windows10-2004-x64
3010 Motive.pth
windows7-x64
3010 Motive.pth
windows10-2004-x64
3010 Piano.wvt
windows7-x64
3010 Piano.wvt
windows10-2004-x64
3011 Factory Drum.smp
windows7-x64
3011 Factory Drum.smp
windows10-2004-x64
3011 Organ.wvt
windows7-x64
3011 Organ.wvt
windows10-2004-x64
3012 Percussive.wvt
windows7-x64
3012 Percussive.wvt
windows10-2004-x64
3Analysis
-
max time kernel
151s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
24-04-2024 21:03
Behavioral task
behavioral1
Sample
LUXONIX Purity VSTi.v1.2.4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
LUXONIX Purity VSTi.v1.2.4.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ioSpecial.ini
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ioSpecial.ini
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
000 GM Normal.pth
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
000 GM Normal.pth
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
000 GM Normal.smp
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
000 GM Normal.smp
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
000 GM Normal.wvt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
000 GM Normal.wvt
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
001 GM Rhythm.pth
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
001 GM Rhythm.pth
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
001 GM Rhythm.smp
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
001 GM Rhythm.smp
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
001 GM Rhythm.wvt
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
001 GM Rhythm.wvt
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
010 Factory Melody.smp
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
010 Factory Melody.smp
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
010 Motive.pth
Resource
win7-20240215-en
Behavioral task
behavioral24
Sample
010 Motive.pth
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
010 Piano.wvt
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
010 Piano.wvt
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
011 Factory Drum.smp
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
011 Factory Drum.smp
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
011 Organ.wvt
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
011 Organ.wvt
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
012 Percussive.wvt
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
012 Percussive.wvt
Resource
win10v2004-20240412-en
General
-
Target
000 GM Normal.pth
-
Size
376KB
-
MD5
b786f758eae203bd531920c58c46d15c
-
SHA1
ba220a563da9a0d07398c19664f6347c5869549c
-
SHA256
18c2e3c0ed69e3b2bf19cdff71d6a404606c4ceb9185ad6ab647014d77362f85
-
SHA512
707b9deb57c516dd209322012f731d1aab40e2f8c9794e81cc929a24f0dba2f5aa26043f6130abbf201b5fbde392db834f7babab098f88ab55064f6e3a60f995
-
SSDEEP
192:GbBBBBvBBBBABBBBzBBBBhBBBBZBBBBEBBBBGBBBBLBBBBpBBBBMBBBBVqBBBBS4:PN1Oeb/VAC0ZfPy
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
OpenWith.execmd.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000_Classes\Local Settings cmd.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 3320 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\000 GM Normal.pth"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2232 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:81⤵