Overview

overview

7

Static

static

3

kona_dance...er.exe

windows7-x64

7

kona_dance...er.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2024, 11:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    kona_dancer/kona_dancer.exe
  • Size 4.7MB
  • Sample240628-nmktfazdmn
  • SHA256 565693b546ad31afae5b00ab2f54db4211949665ff22a09aa769689d852c736d
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\kona_dancer\kona_dancer.exe
    "C:\Users\Admin\AppData\Local\Temp\kona_dancer\kona_dancer.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1780

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        File.cu.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\File.cu.mfx
        • Size 11KB
        • SHA256 19f426dea391079ffe24d1d1557f304516cb26941cbe52f50b70072e23294ae4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Flash6MovieV2.cu.mvx
        • Path C:\Users\Admin\AppData\Local\Temp\Flash6MovieV2.cu.mvx
        • Size 1016KB
        • SHA256 9efcc0e68ef48cbfef9238ea914684b95555c76b0d5476eb1bab6120123def69
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        MFPL7014.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\MFPL7014.DLL
        • Size 896KB
        • SHA256 94058fe5343d8d76d313998e1db44a0bedd47184b132fa6c3ace021cb665d703
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Registry.cu.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\Registry.cu.mfx
        • Size 10KB
        • SHA256 1634a80cb09d33249fb16b34d0d0994c6af1a9099f1214a35e274357d1e87817
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.cu.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\System.cu.mfx
        • Size 15KB
        • SHA256 4390e1e3412f0ab9d342233b485c938da520eba570882ce5a67c7c5d591b6373
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        mPlayer.cu.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mPlayer.cu.dll
        • Size 112KB
        • SHA256 a58ae284edc3b223c78dfe9536bfae239acead751a9de003b45512b249c1720f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/1780-26-0x0000000003760000-0x000000000385E000-memory.dmp
        Download

        memory/1780-34-0x0000000003860000-0x0000000003A03000-memory.dmp
        Download