Overview
overview
7Static
static
3MatDeckSetup.exe
windows7-x64
7MatDeckSetup.exe
windows10-2004-x64
7SCADA.exe
windows7-x64
1SCADA.exe
windows10-2004-x64
1SoftwareUp...in.exe
windows7-x64
1SoftwareUp...in.exe
windows10-2004-x64
1USBDEV_LIB.dll
windows7-x64
1USBDEV_LIB.dll
windows10-2004-x64
1VMD.exe
windows7-x64
1VMD.exe
windows10-2004-x64
7VirtumentU...al.pdf
windows7-x64
1VirtumentU...al.pdf
windows10-2004-x64
1XlsLib.dll
windows7-x64
1XlsLib.dll
windows10-2004-x64
3biodaq.dll
windows7-x64
1biodaq.dll
windows10-2004-x64
1biodaqutil.dll
windows7-x64
1biodaqutil.dll
windows10-2004-x64
1ftd2xx.dll
windows7-x64
1ftd2xx.dll
windows10-2004-x64
1imageformats/qgif.dll
windows7-x64
1imageformats/qgif.dll
windows10-2004-x64
1imageforma...eg.dll
windows7-x64
1imageforma...eg.dll
windows10-2004-x64
1imageformats/qsvg.dll
windows7-x64
1imageformats/qsvg.dll
windows10-2004-x64
1lessons/Le...nt.pdf
windows7-x64
1lessons/Le...nt.pdf
windows10-2004-x64
1lessons/Le...ph.pdf
windows7-x64
1lessons/Le...ph.pdf
windows10-2004-x64
1libMPSSE.dll
windows7-x64
1libMPSSE.dll
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
27/06/2024, 16:14
Behavioral task
behavioral1
Sample
MatDeckSetup.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
MatDeckSetup.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
SCADA.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
SCADA.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
SoftwareUpdaterAdmin.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
SoftwareUpdaterAdmin.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
USBDEV_LIB.dll
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
USBDEV_LIB.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
VMD.exe
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
VMD.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
VirtumentUserManual.pdf
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
VirtumentUserManual.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
XlsLib.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
XlsLib.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
biodaq.dll
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
biodaq.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
biodaqutil.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
biodaqutil.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
ftd2xx.dll
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
ftd2xx.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
imageformats/qgif.dll
Resource
win7-20240419-en
Behavioral task
behavioral22
Sample
imageformats/qgif.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
imageformats/qjpeg.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
imageformats/qjpeg.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
imageformats/qsvg.dll
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
imageformats/qsvg.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
lessons/Lesson 1 - MatDeck document.pdf
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
lessons/Lesson 1 - MatDeck document.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
lessons/Lesson 9 - 3D graph.pdf
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
lessons/Lesson 9 - 3D graph.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
libMPSSE.dll
Resource
win7-20240611-en
Behavioral task
behavioral32
Sample
libMPSSE.dll
Resource
win10v2004-20240611-en
General
-
Target
SCADA.exe
-
Size
3KB
-
MD5
c2ed3e16499987aa8a7caf7c0351d334
-
SHA1
0803cb9297f8eaf33c00539ae1a7e63bb4a245ae
-
SHA256
e6acd5b36125333065fbdb9e139941b315a04146c647ec45cf23a10925c8a41e
-
SHA512
f48212f74703390b38886f932a9ebd1426bdd0c37fbc5751dded2becce5f01a1b961f0fe5cdb5cfcbd79489b2fc224e71f5a82688c41ef52ae7a744162bafa1b
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3616 SCADA.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 4992 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4992 AUDIODG.EXE -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3616 SCADA.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\SCADA.exe"C:\Users\Admin\AppData\Local\Temp\SCADA.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:3616
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x468 0x3381⤵
- Suspicious use of AdjustPrivilegeToken
PID:4992
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
62B
MD547878c074f37661118db4f3525b2b6cb
SHA19671e2ef6e3d9fa96e7450bcee03300f8d395533
SHA256b4dc0b48d375647bcfab52d235abf7968daf57b6bbdf325766f31ce7752d7216
SHA51213c626ada191848c31321c74eb7f0f1fde5445a82d34282d69e2b086ba6b539d8632c82bba61ff52185f75fec2514dad66139309835e53f5b09a3c5a2ebecff5
-
Filesize
147B
MD5c3239b95575b0ad63408b8e633f9334d
SHA17dbb42dfa3ca934fb86b8e0e2268b6b793cbccdc
SHA2566546a8ef1019da695edeca7c68103a1a8e746d88b89faf7d5297a60753fd1225
SHA5125685131ad55f43ab73afccbef69652d03bb64e6135beb476bc987f316afe0198157507203b9846728bc7ea25bc88f040e7d2cb557c9480bac72f519d6ba90b25
-
Filesize
100KB
MD58e43dfb32d86f55faec72a2ca55e4ac0
SHA1d91bdbbf83ea9912c197570ffd4db7aa5411c4ac
SHA25698ecc2326a54ec023461add3884d11c7682e7cba926e9454bfad31db25c8a237
SHA5128ae950bf34787f27d49abb19e5dbcde09894676f384e76101697c3456031ff0abd8b3060b9b374c77c2a374894995cb0d6d9847e75770110925ac551ec27d08e