Resubmissions
07/07/2024, 20:29
240707-y91taaxgjk 407/07/2024, 20:21
240707-y48lyaxflq 420/04/2024, 11:56
240420-n355bagg7x 4Analysis
-
max time kernel
136s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
07/07/2024, 20:29
General
-
Target
Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
-
Size
9.4MB
-
MD5
b15e6247e307fe3438f17aa05688ae5e
-
SHA1
f68fe99bf6e6ed87b8d192406f01a3669e440cd2
-
SHA256
b17c4d698a7ff93edbe0512bbf180c896e3ff96c6be8495d3b08dfa1d5c1cf8d
-
SHA512
cdfe99a47ada756f5898dc91dda695926293b4ac5207d585d30d7572b17246443a9ddeba1f9d440e6e800cef535d8b9f6a4be21301f67c6f55cb0795ddf9032c
-
SSDEEP
196608:1tJV+nIDBO8XnlxYmRtxtGnScMHRAErNWw+xOE1h5hOUOkqkDioCnck10:1taIDBO8XlxYmttdcMHRzOxDOUO1CXCI
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 2 IoCs
-
Suspicious use of FindShellTrayWindow 43 IoCs
-
Suspicious use of SendNotifyMessage 41 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Graillon-FREE-2.8\Windows\Graillon-2-FREE-2.8.0.exe"C:\Users\Admin\AppData\Local\Temp\Graillon-FREE-2.8\Windows\Graillon-2-FREE-2.8.0.exe"1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\TraceSubmit.DVR-MS"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\TraceSubmit.DVR-MS"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\RestoreSet.mp4"1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\RestoreSet.mp4"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
304B
MD5781602441469750c3219c8c38b515ed4
SHA1e885acd1cbd0b897ebcedbb145bef1c330f80595
SHA25681970dbe581373d14fbd451ac4b3f96e5f69b79645f1ee1ca715cff3af0bf20d
SHA5122b0a1717d96edb47bdf0ffeb250a5ec11f7d0638d3e0a62fbe48c064379b473ca88ffbececb32a72129d06c040b107834f1004ccda5f0f35b8c3588034786461
-
Filesize
80B
MD5b4955943bb878a3839223a12973aa0da
SHA1ea7b6a0580bc3cecaad0cd7061f67ecdf6bcfda3
SHA25682c35c674b8e631a97f84f4cb10ced13fc206509efabd4c94df2b8859857c213
SHA512dc0342b677955d9c2529239d3b268e3226abebb61b3c99d4ac03a028403b88fdb75cc1b3b87d278293cf06c86b3fac324bc22689c6cfe64fd03d86c2727aefef
-
Filesize
534B
MD5ca1ecba18b9bdd80a09f3ce0490d5367
SHA10b1ebbdc0d9bb92870f8c22221b6394721e625e6
SHA256fa8d0c0ac1e6276aa9e39370757bdb4b7b4f90393347fe434abd51c2920a0e4b
SHA51228cce2fd3f7df88aaa5d0ca715b8659373fc6cceef4929070f067b15da93d088ec8e38e64b5429634fa46adf83df23c2846dd2854ea4eaad248921605585f432
-
Filesize
584B
MD53320675a04ce89ee1ec89ea08563e773
SHA18fece6d8cef90f61320aa3a1c020611e26186410
SHA256bfb178c457ff67929c677cfba8a05f600585f472d797dbd8132ed4d4e304f951
SHA51243ac132817b17f47b4479fd32dcec992cab27d69c8df576595e63f447ecc2abf72d294840ba5adebfc1a088c0df582071c137d80ad4c787a372ee9e9b1d15426
-
Filesize
18B
MD54a63c2269f576fd7de0d9c505a7226f2
SHA1eef4c8aa77a9a925a843953631d0301ff69a08f0
SHA256ca0f55f0c8ad4253f1a97a3b48acd24ea5001bd4fce037f32e9f7ea6757476c3
SHA512a2e02cc8ee86d1e4ad99bea801748f49ec587c0234106c0390a517962ccd3952c0d6b500816a17cfda6900965928cc41ee40ce81b9f604d122423633e4dad8bc
-
Filesize
94KB
MD5ec3bdb41d903f7f7569e7480d02999e3
SHA157c13d86e04a69e840f22092f75e9255fc81dbdf
SHA25613f9604d1134251dbe1a950cd34cbde0ebb98c5cce8d3c81115e2fdee9f1270f
SHA51282c2922003a03c853f9426f23c364503610a35301fe56917a97c72295ef0f8c23765734d84ed8d4c3748e14d4d3a23381671717102c3d4067f3d2383f2fc0ded
-
Filesize
96KB
-
Filesize
788KB
-
Filesize
116KB
-
Filesize
68KB
-
Filesize
2.0MB
-
Filesize
260KB
-
Filesize
132KB
-
Filesize
68KB
-
Filesize
192KB
-
Filesize
412KB
-
Filesize
16.7MB
-
Filesize
992KB
-
Filesize
68KB
-
Filesize
108KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
96KB
-
Filesize
496KB
-
Filesize
68KB
-
Filesize
348KB
-
Filesize
160KB
-
Filesize
144KB
-
Filesize
96KB
-
Filesize
140KB
-
Filesize
68KB
-
Filesize
72KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
1020KB
-
Filesize
64KB
-
Filesize
68KB
-
Filesize
188KB
-
Filesize
992KB
-
Filesize
68KB
-
Filesize
264KB
-
Filesize
392KB
-
Filesize
436KB
-
Filesize
1.5MB
-
Filesize
92KB
-
Filesize
208KB
-
Filesize
88KB
-
Filesize
2.7MB
-
Filesize
16.7MB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
2.7MB
-
Filesize
208KB
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
108KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
192KB
-
Filesize
96KB
-
Filesize
2.0MB
-
Filesize
68KB
-
Filesize
208KB
-
Filesize
68KB
-
Filesize
96KB
-
Filesize
132KB
-
Filesize
260KB
-
Filesize
2.7MB
-
Filesize
992KB