Overview

overview

7

Static

static

3

HAB910_v1....13.exe

windows7-x64

7

HAB910_v1....13.exe

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

EProfiler.dll

windows7-x64

3

EProfiler.dll

windows10-2004-x64

3

QtCore4.dll

windows7-x64

3

QtCore4.dll

windows10-2004-x64

3

QtGui4.dll

windows7-x64

1

QtGui4.dll

windows10-2004-x64

1

QtNetwork4.dll

windows7-x64

3

QtNetwork4.dll

windows10-2004-x64

3

QtSql4.dll

windows7-x64

1

QtSql4.dll

windows10-2004-x64

1

QtXml4.dll

windows7-x64

3

QtXml4.dll

windows10-2004-x64

3

dxf/bat_no_spline.vbs

windows7-x64

1

dxf/bat_no_spline.vbs

windows10-2004-x64

1

hab_910.exe

windows7-x64

1

hab_910.exe

windows10-2004-x64

1

libgcc_s_dw2-1.dll

windows7-x64

3

libgcc_s_dw2-1.dll

windows10-2004-x64

3

libopencv_...20.dll

windows7-x64

3

libopencv_...20.dll

windows10-2004-x64

3

libopencv_core220.dll

windows7-x64

3

libopencv_core220.dll

windows10-2004-x64

3

libopencv_...20.dll

windows7-x64

3

libopencv_...20.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 07:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    HAB910_v1.4_230413.exe

  • Size

    32.1MB

  • MD5

    bb39a9e910c509b15109bad6f07a0812

  • SHA1

    0fc45d5b4fd6e96ac3a66317d8903892d7c97deb

  • SHA256

    acac2e1bad58381fb4fa36027b7e9e8fb15158ef32f36533953f0e24068fe634

  • SHA512

    3b31bb66201b1aacd763fa574d66ae25a32d9f1c60d77188bfdb852256e0b7689ec9aa0909520f983123af9b1818a4f6892fb842e8d27d581e954df710fed946

  • SSDEEP

    393216:u/gE/XyOav5Gj8CWSNs7Jhppvq3sYXXujTD7+z5R+EtFvTHhCfmdH1t/zRQk3Zbm:u/1fav5GI/SwJvpvq6SzV/hzXRwmPFQl

Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • NSIS installer 2 IoCs
    installer

Processes

  • C:\Users\Admin\AppData\Local\Temp\HAB910_v1.4_230413.exe
    "C:\Users\Admin\AppData\Local\Temp\HAB910_v1.4_230413.exe"
    1⤵
    • Loads dropped DLL
    PID:1936

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsd140E.tmp\modern-wizard.bmp
    Filesize

    25KB

    MD5

    cbe40fd2b1ec96daedc65da172d90022

    SHA1

    366c216220aa4329dff6c485fd0e9b0f4f0a7944

    SHA256

    3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

    SHA512

    62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

    Download Submit

  • \Huvitz_pc\HAB910\hab_910.exe
    Filesize

    23.8MB

    MD5

    5315cb4a7c918bb55558404a33ab5150

    SHA1

    fed51c7af5bdd149402a061a8cf84d1419c5fae5

    SHA256

    141103b94a9e568b6e08289b1232c43047b8dd3ab79f830e045589847058ec2a

    SHA512

    46b4380aa4ed5aa67f2e6a68c5b9d2d5088c438a5f0c7b9270c3c80730031d95d23a175dd11ee8295ef0e8773d06bfdb2c09b76ab3bca1e2536d8ef6e579cf68

    Download Submit

  • \Huvitz_pc\HAB910\uninstall.exe
    Filesize

    61KB

    MD5

    b8764f4cac2ac12f24aa5ac6012fcadb

    SHA1

    9419460b95523eb6ba7d2900b1618aca0489c72e

    SHA256

    6e3512f4363969d70f336973beaca4debe295886ac9ad10eec999ed46d8a47a0

    SHA512

    b5453d17f04f3475394eabb1236f49a496efb53c6aab125973f8f534ff1f930fc48f5bab5a5921f399f3e35b6b5ebcc470b655acc2476d191c2fafb831b6d687

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsd140E.tmp\StartMenu.dll
    Filesize

    7KB

    MD5

    c275bc6ee70d85aebc2328c06515a2a2

    SHA1

    0f12e4736eff8f1a1a4c467e2f52eba2dac4e7e6

    SHA256

    30336c7b09582de438d6c3f561f55366dd7094faf24f34e12df44acf19be9242

    SHA512

    aeff89ebf093555aeaaa15f86e519523266b08e814578540430b3f2b67c6ad92a8e0072716f8ab80e6afc9a160a7bbaab0800b372107613d78793a9fd0fb9240

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsd140E.tmp\System.dll
    Filesize

    11KB

    MD5

    b0c77267f13b2f87c084fd86ef51ccfc

    SHA1

    f7543f9e9b4f04386dfbf33c38cbed1bf205afb3

    SHA256

    a0cac4cf4852895619bc7743ebeb89f9e4927ccdb9e66b1bcd92a4136d0f9c77

    SHA512

    f2b57a2eea00f52a3c7080f4b5f2bb85a7a9b9f16d12da8f8ff673824556c62a0f742b72be0fd82a2612a4b6dbd7e0fdc27065212da703c2f7e28d199696f66e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsd140E.tmp\nsDialogs.dll
    Filesize

    9KB

    MD5

    eac1c3707970fe7c71b2d760c34763fa

    SHA1

    f275e659ad7798994361f6ccb1481050aba30ff8

    SHA256

    062c75ad650548750564ffd7aef8cd553773b5c26cae7f25a5749b13165194e3

    SHA512

    3415bd555cf47407c0ae62be0dbcba7173d2b33a371bf083ce908fc901811adb888b7787d11eb9d99a1a739cbd9d1c66e565db6cd678bdadaf753fbda14ffd09

    Download Submit