Overview
overview
7Static
static
7hd-video-c...ro.exe
windows7-x64
7hd-video-c...ro.exe
windows10-2004-x64
4$APPDATA/W...dl.exe
windows7-x64
7$APPDATA/W...dl.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Data/DRead.dll
windows7-x64
3Data/DRead.dll
windows10-2004-x64
3Data/SDL2.dll
windows7-x64
1Data/SDL2.dll
windows10-2004-x64
1Data/SoundTouch.dll
windows7-x64
1Data/SoundTouch.dll
windows10-2004-x64
3Data/avcodec-58.dll
windows7-x64
1Data/avcodec-58.dll
windows10-2004-x64
3Data/avdevice-58.dll
windows7-x64
3Data/avdevice-58.dll
windows10-2004-x64
3Data/avfilter-7.dll
windows7-x64
1Data/avfilter-7.dll
windows10-2004-x64
1Data/avformat-58.dll
windows7-x64
3Data/avformat-58.dll
windows10-2004-x64
3Data/avutil-56.dll
windows7-x64
3Data/avutil-56.dll
windows10-2004-x64
1Data/dvddec.dll
windows7-x64
1Data/dvddec.dll
windows10-2004-x64
1Analysis
- max time kernel
92s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
05/06/2024, 04:08
Behavioral task
behavioral1
Sample
hd-video-converter-pro.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
hd-video-converter-pro.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$APPDATA/WonderFox Soft/HD Video Converter Factory Pro/Bin/dl.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
$APPDATA/WonderFox Soft/HD Video Converter Factory Pro/Bin/dl.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Data/DRead.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Data/DRead.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Data/SDL2.dll
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
Data/SDL2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Data/SoundTouch.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
Data/SoundTouch.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Data/avcodec-58.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Data/avcodec-58.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
Data/avdevice-58.dll
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
Data/avdevice-58.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
Data/avfilter-7.dll
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
Data/avfilter-7.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Data/avformat-58.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Data/avformat-58.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
Data/avutil-56.dll
Resource
win7-20240419-en
Behavioral task
behavioral30
Sample
Data/avutil-56.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
Data/dvddec.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Data/dvddec.dll
Resource
win10v2004-20240226-en
General
- Target hd-video-converter-pro.exe
- Size 131.6MB
- Sample240605-eql18sdg3z
- SHA256 fd458a3b3bd8eb56e2af627e877e11b8fb9d0d4a731e262ea0ce44f0b9586de6
- MD5 2c351290d9a88fd3b74046fd53e65593
- SHA1 4f767c42dbcc28462ef913c5194dea497f3c52f8
- SHA512 fb6524d1971d4afd19d2b9f26e55f5a217f5fe0f1aab012d326c8bd84974a10726b0721d24aed3efbe7d18b5f41997aa42edd6e8ce022b9103e9fa5c5c50a8a6
- SSDEEP 3145728:OgfF7/fgNPHHOC14VDBcXZY9VtF9LFMSHIWpAYIFk:Vf9IPHL1mDHVDHMDWtZ
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
pid Process 4668 hd-video-converter-pro.exe 4668 hd-video-converter-pro.exe 4668 hd-video-converter-pro.exe 4668 hd-video-converter-pro.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4668 hd-video-converter-pro.exe 4668 hd-video-converter-pro.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nss415F.tmp\FindProcDLL.dll
- Size 27KB
- SHA256 6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
- MD5 6f73b00aef6c49eac62128ef3eca677e
- SHA1 1b6aff67d570e5ee61af2376247590eb49b728a1
- SHA512 678fc4bf7d345eeb99a3420ec7d0071eaba302845e93b48527d9a2a9c406709cc44ec74d6a889e25a8351a463803f8713a833df3a1707a5ad50db05240a32938
- SSDEEP 384:DZoRF0XXUuJReQg0Tw67ADWBTgmldIogUD3GLgFmyaX/fVYcWJQCDmrinogRdBl:DZaF0HtTwuz9yu3KgwRX1nWJ1q+noI
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nss415F.tmp\InstallOptions.dll
- Size 15KB
- SHA256 efb07b38b205f4dcde166887df43c089cfecff627099922cc0c88fce27075063
- MD5 6982595ed8bad3e983d6200201b9a1ab
- SHA1 ddf3790820f6800e975e2293d46c95e1429b1d3d
- SHA512 3bf611bf9792b275632dc6980bb8f8ff522109db7365c936b2a340d2997ace6658af6dce3c8082de4e3a5b64cd2324ac21f67de061908933666fb1aa529a6eed
- SSDEEP 384:mLbZ+21yxu6kGxPcSkfWpATCzip8OvNV:Mbj1yomESkQNRi
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nss415F.tmp\LangDLL.dll
- Size 4KB
- SHA256 e80cfa37169aecfee7d91508d1025706294d47b2950debf2c31e6ba52f3b8cf9
- MD5 6e8035da51e2512fb88440d8d94ac38a
- SHA1 c7e96e638450a40cb163b66ff60300e143940921
- SHA512 1b8c849676d64b7e380aa884f3688ed1e6544aa4cd54a998522195d877e7a4c3071ff4fcc1478cd3afd1f77e89bee12faefe85db056d496d42a047801d69bcfd
- SSDEEP 96:34Nr2mIDHfLfzMUyJ1Cb/zdYumvhTHVYE:I12mIHYUy4/RBiK
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nss415F.tmp\UserInfo.dll
- Size 4KB
- SHA256 e09e0cea3d7624a438fe4e02df230e995dcddcd9909080d883b107a7137b471e
- MD5 a379ffb9785b333e5da4dee69dfd8f27
- SHA1 7f1eeda2db94481e134ac09f0f8c7531b84e9890
- SHA512 c868a9b6038bfdb40aff1c067fbfdddad58fdae798c282a0bfb59133329be1744544041a71dd1ae222ed5d6e4e4c1801a11e7caeef7a4dfda416520ef2b10f38
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nss415F.tmp\ioSpecial.ini
- Size 1KB
- SHA256 073277fb36eaa4375191d8dffb517b30f13007aead8fae189fbb1041a8815fbf
- MD5 fe2b32756ffb99a545aff409e6d3a373
- SHA1 e96a178288b02b0f6a8bf5d04c004bfccc36a241
- SHA512 84858c01ebfd2ee04057486932d133aac6a1b131b1b4fc2ec8846f04b72debe7db94144f43a8d366a8ea769100aff585a1ed997368986c0f742cd19a78962e07
- MD5 SHA1 SHA512