Overview
overview
7Static
static
7Flash Play...er.exe
windows10-1703-x64
7Flash Play...er.exe
ubuntu-24.04-amd64
$PLUGINSDI...em.dll
windows10-1703-x64
3$PLUGINSDI...em.dll
ubuntu-24.04-amd64
$TEMP/aeac...up.exe
windows10-1703-x64
3$TEMP/aeac...up.exe
ubuntu-24.04-amd64
$TEMP/aeac...ata.js
windows10-1703-x64
3$TEMP/aeac...ata.js
ubuntu-24.04-amd64
1$TEMP/aeac...x.html
windows10-1703-x64
1$TEMP/aeac...x.html
ubuntu-24.04-amd64
$TEMP/aeac...PIE.js
windows10-1703-x64
3$TEMP/aeac...PIE.js
ubuntu-24.04-amd64
1$TEMP/aeac...app.js
windows10-1703-x64
3$TEMP/aeac...app.js
ubuntu-24.04-amd64
1$TEMP/aeac...min.js
windows10-1703-x64
3$TEMP/aeac...min.js
ubuntu-24.04-amd64
1Analysis
-
max time kernel
82s -
max time network
81s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
14-06-2024 18:38
Behavioral task
behavioral1
Sample
Flash PlayerInstaller.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Flash PlayerInstaller.exe
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral5
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/Setup.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/Setup.exe
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral7
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/data.js
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/data.js
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral9
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/index.html
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/index.html
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral11
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/web/css/PIE.js
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/web/css/PIE.js
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral13
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/web/js/app.js
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/web/js/app.js
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral15
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/web/js/formcontrols.min.js
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/web/js/formcontrols.min.js
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
$TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/Setup.exe
-
Size
821KB
-
MD5
f517e343fc5d364856d71fe477b34094
-
SHA1
507eecf79302cb2f31521638ad28f6035b0f92eb
-
SHA256
fb43823612d7d6c9efef26ad685f720e0e007fcad6379dbe1e002fa18242e908
-
SHA512
424da125281693651beaf4b324b5cb3d1eee4445e7c21d3d05785e4b147f27b63c0c21dcd52ed605bc22b32f79a778eef58a9ad24c2896179be60c639b2b6340
-
SSDEEP
12288:wJm/46p/1b8iQaGKHvAqNREY8dUZ+yGLapVmSRWBuqTgaa8QDEpUY39zuNQpzD:wklNQadvTjEIZ+FLapVmwWBuqTRh3x
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
Setup.exepid process 1452 Setup.exe 1452 Setup.exe