Overview
overview
7Static
static
32594790310...ae.exe
windows7-x64
72594790310...ae.exe
windows10-2004-x64
7$PLUGINSDI...ID.dll
windows7-x64
3$PLUGINSDI...ID.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$TEMP/Micr...up.exe
windows7-x64
6$TEMP/Micr...up.exe
windows10-2004-x64
6OpenAI Translator.exe
windows7-x64
1OpenAI Translator.exe
windows10-2004-x64
6resources/..._apple
macos-10.15-amd64
4resources/..._intel
macos-10.15-amd64
4resources/copy.vbs
windows7-x64
1resources/copy.vbs
windows10-2004-x64
1resources/...xt.vbs
windows7-x64
1resources/...xt.vbs
windows10-2004-x64
1resources/paste.vbs
windows7-x64
1resources/paste.vbs
windows10-2004-x64
1resources/...ll.vbs
windows7-x64
1resources/...ll.vbs
windows10-2004-x64
1uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Analysis
-
max time kernel
120s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
28-04-2024 07:16
Static task
static1
Behavioral task
behavioral1
Sample
25947903109ba1bf70d1e06423be6d39fccdece8258cf5c959b65ec8d0fe6aae.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
25947903109ba1bf70d1e06423be6d39fccdece8258cf5c959b65ec8d0fe6aae.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ApplicationID.dll
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ApplicationID.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
$TEMP/MicrosoftEdgeWebview2Setup.exe
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
$TEMP/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
OpenAI Translator.exe
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
OpenAI Translator.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
resources/bin/ocr_apple
Resource
macos-20240410-en
Behavioral task
behavioral18
Sample
resources/bin/ocr_intel
Resource
macos-20240410-en
Behavioral task
behavioral19
Sample
resources/copy.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
resources/copy.vbs
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
resources/get-selected-text.vbs
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
resources/get-selected-text.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
resources/paste.vbs
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
resources/paste.vbs
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
resources/select-all.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
resources/select-all.vbs
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
uninstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
uninstall.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
General
-
Target
25947903109ba1bf70d1e06423be6d39fccdece8258cf5c959b65ec8d0fe6aae.exe
-
Size
12.1MB
-
MD5
31469440076eed8943402f591a36a4c6
-
SHA1
da4a122e68c21e79d1bf3624550644c57f22eddd
-
SHA256
25947903109ba1bf70d1e06423be6d39fccdece8258cf5c959b65ec8d0fe6aae
-
SHA512
5c02e8d930debb5fcee9baa8199c08dd62d954c4f460fe8815247838c85fc45ba405e3b4d23c551e29da8e5aaa6edd4f238645c29845a004279441df3b52abf0
-
SSDEEP
196608:x+27jhX163gO/A/TORJmdb/1kFIQv6zAn5njGwa4ZpzS583hF+r2i7bKvyIwGFlN:x5J14VjXmdhkFIl8n5jGiL/c7O/wGF7z
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
Processes:
25947903109ba1bf70d1e06423be6d39fccdece8258cf5c959b65ec8d0fe6aae.exepid process 1180 25947903109ba1bf70d1e06423be6d39fccdece8258cf5c959b65ec8d0fe6aae.exe 1180 25947903109ba1bf70d1e06423be6d39fccdece8258cf5c959b65ec8d0fe6aae.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\nsy35B8.tmp\System.dllFilesize
12KB
MD5cff85c549d536f651d4fb8387f1976f2
SHA1d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA2568dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
SHA512531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
-
C:\Users\Admin\AppData\Local\Temp\nsy35B8.tmp\nsDialogs.dllFilesize
9KB
MD56c3f8c94d0727894d706940a8a980543
SHA10d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA25656b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
SHA5122094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355