Overview
overview
8Static
static
3nightlight....0.exe
windows7-x64
3nightlight....0.exe
windows10-2004-x64
4$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...up.exe
windows7-x64
8$PLUGINSDI...up.exe
windows10-2004-x64
8NightLight...op.exe
windows7-x64
1NightLight...op.exe
windows10-2004-x64
6Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 16:24
Static task
static1
Behavioral task
behavioral1
Sample
nightlight_desktop_setup-1.2.0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
nightlight_desktop_setup-1.2.0.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
NightLight Desktop.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
NightLight Desktop.exe
Resource
win10v2004-20240709-en
General
-
Target
nightlight_desktop_setup-1.2.0.exe
-
Size
6.8MB
-
MD5
4fb5fbb1727f25e5654a5b3fdc9dae19
-
SHA1
b343402e3af4751de999e6372e4b8e126c3afacb
-
SHA256
ccbb921fcaa1d70e00c2d73de1b9762370da2ab96d7245a039b26bd3d773e1df
-
SHA512
e4dd1b61c28bfb56fa028c7a100af35f2e255ba45967d7715bfde3a220162d423c2b9b6585355e5b744045fae5e26ce6c5582d085bfa9581d2f92fb8c26ed152
-
SSDEEP
196608:RC70yAyMGJpCIh0zoE5oWESVmooWnSZ4LSQ8f2lWjo:RRO3C7UErHBnSOBvWjo
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).