Overview
overview
10Static
static
10Vulcan1.5 ...ok.dll
windows7-x64
1Vulcan1.5 ...ok.dll
windows10-2004-x64
1Vulcan1.5 ...64.dll
windows7-x64
1Vulcan1.5 ...64.dll
windows10-2004-x64
1Vulcan1.5 ...ok.dll
windows7-x64
1Vulcan1.5 ...ok.dll
windows10-2004-x64
1Vulcan1.5 ...64.dll
windows7-x64
1Vulcan1.5 ...64.dll
windows10-2004-x64
1Vulcan1.5 ...er.exe
windows7-x64
1Vulcan1.5 ...er.exe
windows10-2004-x64
1Vulcan1.5 ....5.exe
windows7-x64
10Vulcan1.5 ....5.exe
windows10-2004-x64
10Vulcan1.5 ...oup.js
windows7-x64
3Vulcan1.5 ...oup.js
windows10-2004-x64
3Vulcan1.5 ...ace.js
windows7-x64
3Vulcan1.5 ...ace.js
windows10-2004-x64
3Vulcan1.5 ...nfo.js
windows7-x64
3Vulcan1.5 ...nfo.js
windows10-2004-x64
3Vulcan1.5 ...rch.js
windows7-x64
3Vulcan1.5 ...rch.js
windows10-2004-x64
3Vulcan1.5 ...log.js
windows7-x64
3Vulcan1.5 ...log.js
windows10-2004-x64
3Vulcan1.5 ...ols.js
windows7-x64
3Vulcan1.5 ...ols.js
windows10-2004-x64
3Vulcan1.5 ...ave.js
windows7-x64
3Vulcan1.5 ...ave.js
windows10-2004-x64
3Vulcan1.5 ...yce.js
windows7-x64
3Vulcan1.5 ...yce.js
windows10-2004-x64
3Vulcan1.5 ...ian.js
windows7-x64
3Vulcan1.5 ...ian.js
windows10-2004-x64
3Vulcan1.5 ...are.js
windows7-x64
3Vulcan1.5 ...are.js
windows10-2004-x64
3Analysis
- max time kernel
150s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240419-en - resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system - submitted
04/05/2024, 10:33
Behavioral task
behavioral1
Sample
Vulcan1.5 BETA/CED3D10Hook.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Vulcan1.5 BETA/CED3D10Hook.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Vulcan1.5 BETA/CED3D10Hook64.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Vulcan1.5 BETA/CED3D10Hook64.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Vulcan1.5 BETA/CED3D11Hook.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
Vulcan1.5 BETA/CED3D11Hook.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Vulcan1.5 BETA/CED3D11Hook64.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
Vulcan1.5 BETA/CED3D11Hook64.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
Vulcan1.5 BETA/FPS Fixer.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Vulcan1.5 BETA/FPS Fixer.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
Vulcan1.5 BETA/Vulcan1.5.exe
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
Vulcan1.5 BETA/Vulcan1.5.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
Vulcan1.5 BETA/autorun/AddToNewGroup.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Vulcan1.5 BETA/autorun/AddToNewGroup.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
Vulcan1.5 BETA/autorun/DotNetInterface.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Vulcan1.5 BETA/autorun/DotNetInterface.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Vulcan1.5 BETA/autorun/JavaInfo.js
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Vulcan1.5 BETA/autorun/JavaInfo.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
Vulcan1.5 BETA/autorun/JavaSearch.js
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
Vulcan1.5 BETA/autorun/JavaSearch.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
Vulcan1.5 BETA/autorun/MethodInvokeDialog.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Vulcan1.5 BETA/autorun/MethodInvokeDialog.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
Vulcan1.5 BETA/autorun/andtools.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Vulcan1.5 BETA/autorun/andtools.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
Vulcan1.5 BETA/autorun/autosave.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Vulcan1.5 BETA/autorun/autosave.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
Vulcan1.5 BETA/autorun/babyce.js
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
Vulcan1.5 BETA/autorun/babyce.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral29
Sample
Vulcan1.5 BETA/autorun/bigendian.js
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
Vulcan1.5 BETA/autorun/bigendian.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral31
Sample
Vulcan1.5 BETA/autorun/ceshare.js
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Vulcan1.5 BETA/autorun/ceshare.js
Resource
win10v2004-20240226-en
General
- Target Vulcan1.5 BETA/FPS Fixer.exe
- Size 509KB
- Sample240504-mltvaaea64
- SHA256 9491b1c563b349ab1c9bc2b8dc76f08019462518ecb6d84bdd2060a7b37f9eac
- MD5 2a60dfd1e0f85fbaeeeedfa3c4ff7082
- SHA1 39818c8615995ab987230598f921c14e2fbc6788
- SHA512 9d3316b136c05ec91b2f9231cea661c6d670277247b627931cf2231b65d3bbb4a9f9967f71bcea7dc9ba2393001cb7540f49a1caea500367afa7d40dea780c8e
- SSDEEP 12288:bKOjJsDc2+WC+D+4H/xeGofENaTSuGCC709:bKyacgDD+4fwG1NaTSw
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe 4928 FPS Fixer.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4928 FPS Fixer.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4928 FPS Fixer.exe