Overview
overview
3Static
static
32d00754f44...c6.exe
windows7-x64
32d00754f44...c6.exe
windows10-2004-x64
3$COMMONFIL...re.dll
windows7-x64
1$COMMONFIL...re.dll
windows10-2004-x64
1Default_6....ig.vbs
windows7-x64
1Default_6....ig.vbs
windows10-2004-x64
1Default_7....ig.vbs
windows7-x64
1Default_7....ig.vbs
windows10-2004-x64
1$INSTDIR$_...er.vbs
windows7-x64
1$INSTDIR$_...er.vbs
windows10-2004-x64
1$INSTDIR$_...er.vbs
windows7-x64
1$INSTDIR$_...er.vbs
windows10-2004-x64
1$INSTDIR$_...or.vbs
windows7-x64
1$INSTDIR$_...or.vbs
windows10-2004-x64
1$INSTDIR$_...by.vbs
windows7-x64
1$INSTDIR$_...by.vbs
windows10-2004-x64
1$INSTDIR$_...ter.js
windows7-x64
3$INSTDIR$_...ter.js
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...le.dll
windows7-x64
1$PLUGINSDI...le.dll
windows10-2004-x64
1Docs/REAPE...rt.pdf
windows7-x64
1Docs/REAPE...rt.pdf
windows10-2004-x64
1Plugins/FFmpeg.dll
windows7-x64
1Plugins/FFmpeg.dll
windows10-2004-x64
1Plugins/FX...st.dll
windows7-x64
1Plugins/FX...st.dll
windows10-2004-x64
1Plugins/FX...mp.dll
windows7-x64
1Plugins/FX...mp.dll
windows10-2004-x64
1Analysis
- max time kernel
140s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
12/06/2024, 01:22
Behavioral task
behavioral1
Sample
2d00754f44c07a3241059e43be8dc6c6.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral2
Sample
2d00754f44c07a3241059e43be8dc6c6.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$COMMONFILES64/Propellerhead Software/ReWire/ReWire.dll
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral4
Sample
$COMMONFILES64/Propellerhead Software/ReWire/ReWire.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Default_6.0_unpacked/rtconfig.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
Default_6.0_unpacked/rtconfig.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Default_7.0_unpacked/rtconfig.vbs
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral8
Sample
Default_7.0_unpacked/rtconfig.vbs
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$INSTDIR$_8_/Effects/Liteon/deesser.vbs
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral10
Sample
$INSTDIR$_8_/Effects/Liteon/deesser.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$INSTDIR$_8_/Effects/Liteon/np1136peaklimiter.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral12
Sample
$INSTDIR$_8_/Effects/Liteon/np1136peaklimiter.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$INSTDIR$_8_/Effects/Liteon/ringmodulator.vbs
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral14
Sample
$INSTDIR$_8_/Effects/Liteon/ringmodulator.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$INSTDIR$_8_/Effects/midi/sequencer_megababy.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
$INSTDIR$_8_/Effects/midi/sequencer_megababy.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
$INSTDIR$_8_/Scripts/Cockos/Default_6.0_theme_adjuster.js
Resource
win7-20240611-en
windows7-x64
Behavioral task
behavioral18
Sample
$INSTDIR$_8_/Scripts/Cockos/Default_6.0_theme_adjuster.js
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
$PLUGINSDIR/portable.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral24
Sample
$PLUGINSDIR/portable.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Docs/REAPER Quick Start.pdf
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral26
Sample
Docs/REAPER Quick Start.pdf
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Plugins/FFmpeg.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral28
Sample
Plugins/FFmpeg.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Plugins/FX/reacast.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral30
Sample
Plugins/FX/reacast.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Plugins/FX/reacomp.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral32
Sample
Plugins/FX/reacomp.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
General
- Target Default_7.0_unpacked/rtconfig.vbs
- Size 121KB
- Sample240612-brbecaxenc
- SHA256 db94a4e3ca27e461e5a218cf0f61db618edeb75e09b879744c682d0c6ce4fe7e
- MD5 30bfe5f2427210acca39ad7f49a76735
- SHA1 0d84de62b16922aee7874c9d0ac74462f2d62d08
- SHA512 95ad2a74ddfce2a0b9e84ce30bc01217365bcc06313c35c3691806618a85f8776c3119ea0b40ffadd92606d7bd9b88c9d696df1c8a3c1e07500d678c790477ad
- SSDEEP 1536:qJKyUuQfhbUJM29N92zgOxpTt6y1RH54+r0tgBTwmxn33MYBgd6G8txZ5313pDon:qJKyUuQfhbUJM29N92zgg3r/nTANB
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Default_7.0_unpacked\rtconfig.vbs"1⤵PID:2868
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3940 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:81⤵PID:2772