Overview
overview
4Static
static
3TRANSCEND-...ir.exe
windows7-x64
3TRANSCEND-...ir.exe
windows10-2004-x64
3TRANSCEND-...er.doc
windows7-x64
4TRANSCEND-...er.doc
windows10-2004-x64
1TRANSCEND-...02.exe
windows7-x64
1TRANSCEND-...02.exe
windows10-2004-x64
1TRANSCEND-...ub.exe
windows7-x64
1TRANSCEND-...ub.exe
windows10-2004-x64
1TRANSCEND-...v3.exe
windows7-x64
4TRANSCEND-...v3.exe
windows10-2004-x64
4TRANSCEND-...v4.exe
windows7-x64
4TRANSCEND-...v4.exe
windows10-2004-x64
4TRANSCEND-...28.exe
windows7-x64
4TRANSCEND-...28.exe
windows10-2004-x64
4TRANSCEND-...04.exe
windows7-x64
4TRANSCEND-...04.exe
windows10-2004-x64
4Analysis
-
max time kernel
92s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
16-05-2024 15:55
Static task
static1
Behavioral task
behavioral1
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/ListDir.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/ListDir.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/Documents_for_SMI_Driver.doc
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/FactoryDriver/Documents_for_SMI_Driver.doc
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/RegCleaner_Ver1.002.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/RegCleaner_Ver1.002.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/restartHub.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/restartHub.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.08_v3.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.08_v3.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.32_v4.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.32_v4.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.50_v5_K0928.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.50_v5_K0928.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.64_v3_L0104.exe
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.64_v3_L0104.exe
Resource
win10v2004-20240426-en
General
-
Target
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/UFD_MP/RegCleaner_Ver1.002.exe
-
Size
144KB
-
MD5
133e44f6692e92834c1cae3eeda87842
-
SHA1
3c797f965e1449a570954dc4f6b133ee5a36cbf6
-
SHA256
47ca0d54f16eb9b8c2b4a9b978ffcc1e6b1183e0e2a54e7d74fddc9a18381ac9
-
SHA512
55df3bdb8b78c22a0483afff85fe4c57fbcd2e7209096f086d7085da0bf8bd8bfceb6ea929475189a0b08ed44fe51fb16bba59951fee0d3f288421c636066c5a
-
SSDEEP
3072:mpIEdf7vNWCB9nnDA+Nh4oUoMEWx7Erv8F+UxvliAPPLYmB6o8NnThaak6/ZDb0E:KISzNWce8T+bUAw
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1648 RegCleaner_Ver1.002.exe 1648 RegCleaner_Ver1.002.exe