Overview
overview
3Static
static
3b43b3fb42e...40.exe
windows7-x64
3b43b3fb42e...40.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3ExWinDLL.dll
windows7-x64
1ExWinDLL.dll
windows10-2004-x64
1cacflt12.sys
windows7-x64
1cacflt12.sys
windows10-2004-x64
1cacflt22.sys
windows7-x64
1cacflt22.sys
windows10-2004-x64
1devcon.exe
windows7-x64
1devcon.exe
windows10-2004-x64
1fixbcd.exe
windows7-x64
fixbcd.exe
windows10-2004-x64
hddflt12.sys
windows7-x64
1hddflt12.sys
windows10-2004-x64
1hddflt22.sys
windows7-x64
1hddflt22.sys
windows10-2004-x64
1nxd12.sys
windows7-x64
1nxd12.sys
windows10-2004-x64
1nxd22.sys
windows7-x64
1nxd22.sys
windows10-2004-x64
1nxddsk12.sys
windows7-x64
1nxddsk12.sys
windows10-2004-x64
1nxddsk22.sys
windows7-x64
1nxddsk22.sys
windows10-2004-x64
1nxdhlp12.sys
windows7-x64
1nxdhlp12.sys
windows10-2004-x64
1nxdhlp22.sys
windows7-x64
1nxdhlp22.sys
windows10-2004-x64
1Analysis
-
max time kernel
92s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
10-06-2024 16:16
Static task
static1
Behavioral task
behavioral1
Sample
b43b3fb42e824d41c7e2e4f4af1c40f591e6dccd9148d6e677d4ef71d9b94940.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b43b3fb42e824d41c7e2e4f4af1c40f591e6dccd9148d6e677d4ef71d9b94940.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
ExWinDLL.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
ExWinDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
cacflt12.sys
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
cacflt12.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
cacflt22.sys
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
cacflt22.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
devcon.exe
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
devcon.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
fixbcd.exe
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
fixbcd.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
hddflt12.sys
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
hddflt12.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
hddflt22.sys
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
hddflt22.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
nxd12.sys
Resource
win7-20240419-en
Behavioral task
behavioral22
Sample
nxd12.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
nxd22.sys
Resource
win7-20240215-en
Behavioral task
behavioral24
Sample
nxd22.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
nxddsk12.sys
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
nxddsk12.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
nxddsk22.sys
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
nxddsk22.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
nxdhlp12.sys
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
nxdhlp12.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
nxdhlp22.sys
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
nxdhlp22.sys
Resource
win10v2004-20240226-en
General
-
Target
b43b3fb42e824d41c7e2e4f4af1c40f591e6dccd9148d6e677d4ef71d9b94940.exe
-
Size
5.8MB
-
MD5
9f2d6c96d80ed34c3e73be143c732826
-
SHA1
42b897625dd6f6e407ac2d48823c7bfa56ef00b1
-
SHA256
b43b3fb42e824d41c7e2e4f4af1c40f591e6dccd9148d6e677d4ef71d9b94940
-
SHA512
1f8c4de8fb8251ece7723c420f4b90b4e2bd6cde556215cd530b788dc7199a2c36fb654f388987920a652a3d71380f832b6e6db8dbdb3f97f7d934d0fe41e57a
-
SSDEEP
98304:S6sx6XGiubCtoOF5JMXMuVUfxRuNVlUg4O9iZncMoaa5PLb+XfGfishvF8Pi77xJ:SF6W1bCt55SMuu5GlXJFMo3Vb++isUib
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).