Overview
overview
10Static
static
3!ŞetUp_51...FS.dll
windows7-x64
1!ŞetUp_51...FS.dll
windows10-2004-x64
1!ŞetUp_51...se.dll
windows7-x64
1!ŞetUp_51...se.dll
windows10-2004-x64
1!ŞetUp_51...on.dll
windows7-x64
1!ŞetUp_51...on.dll
windows10-2004-x64
1!ŞetUp_51...le.dll
windows7-x64
1!ŞetUp_51...le.dll
windows10-2004-x64
1!ŞetUp_51...1].exe
windows7-x64
1!ŞetUp_51...1].exe
windows10-2004-x64
1!ŞetUp_51...et.dll
windows7-x64
1!ŞetUp_51...et.dll
windows10-2004-x64
1!ŞetUp_51...ng.dll
windows7-x64
1!ŞetUp_51...ng.dll
windows10-2004-x64
1!ŞetUp_51...GL.dll
windows7-x64
1!ŞetUp_51...GL.dll
windows10-2004-x64
3!ŞetUp_51...-1.dll
windows7-x64
3!ŞetUp_51...-1.dll
windows10-2004-x64
3!ŞetUp_51...up.exe
windows7-x64
1!ŞetUp_51...up.exe
windows10-2004-x64
10!ŞetUp_51...et.xls
windows7-x64
1!ŞetUp_51...et.xls
windows10-2004-x64
1!ŞetUp_51...lf.dll
windows7-x64
1!ŞetUp_51...lf.dll
windows10-2004-x64
1!ŞetUp_51...st.asp
windows7-x64
3!ŞetUp_51...st.asp
windows10-2004-x64
3Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
06-07-2024 01:58
Static task
static1
Behavioral task
behavioral1
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Debugs/AlphaFS.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Debugs/AlphaFS.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Debugs/License.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Debugs/License.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Debugs/Newtonsoft.Json.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Debugs/Newtonsoft.Json.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Debugs/VersionStable.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Debugs/VersionStable.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/ErrorLog/DirectoryMonitor_[1MB]_[1].exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/ErrorLog/DirectoryMonitor_[1MB]_[1].exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Libs/Extreme.Net.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Libs/Extreme.Net.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Libs/Injecting.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Libs/Injecting.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Libs/libEGL.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Libs/libEGL.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Libs/libgcc_s_dw2-1.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Libs/libgcc_s_dw2-1.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Setup.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/Setup.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/caret.xls
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/caret.xls
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/msedge_elf.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/msedge_elf.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/test.asp
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
!ŞetUp_51286--#PaSꞨKḙy#$$/test.asp
Resource
win10v2004-20240704-en
General
-
Target
!ŞetUp_51286--#PaSꞨKḙy#$$/caret.xls
-
Size
779KB
-
MD5
4d4b5ccd0ff38d099e68792ee07c4a99
-
SHA1
f529d6bb59e1edd6ee57b7ceca20afaa2272d157
-
SHA256
90b7b1dbc330af1f1d80403bacb25b46506b666aa9182fef90aaec5d612507a7
-
SHA512
b8113fef6c0e7dea4ad6615fa0a451e72f481d72691d9f4001196be7784df8620ea8b7c00456a546204e0540580eaa13a4bb7ed18ef90ba7a7022682573484f6
-
SSDEEP
24576:77Z3f25EtWkLrj3JbYNkORIyRJ505UJ3z1lyhgG:puqJbMkU05UJDGhv
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 1 IoCs
Processes:
EXCEL.EXEdescription ioc process Key opened \REGISTRY\MACHINE\Hardware\Description\System\FloatingPointProcessor EXCEL.EXE -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
EXCEL.EXEpid process 2672 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
EXCEL.EXEpid process 2672 EXCEL.EXE 2672 EXCEL.EXE 2672 EXCEL.EXE 2672 EXCEL.EXE
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\!ŞetUp_51286--#PaSꞨKḙy#$$\caret.xls1⤵
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2672