Overview
overview
10Static
static
10Usar tu ma... 4.rar
windows10-2004-x64
3Carpetas d...os.txt
windows10-2004-x64
1Carpetas d...on.zip
windows10-2004-x64
1VDX.exe
windows10-2004-x64
4VDX_x64.exe
windows10-2004-x64
4Carpetas d....0.zip
windows10-2004-x64
1ViGEmBusDr...us.inf
windows10-2004-x64
1ViGEmBusDr...us.sys
windows10-2004-x64
1ViGEmBusDr...09.dll
windows10-2004-x64
1ViGEmBusDr...us.cat
windows10-2004-x64
8ViGEmBusDr...us.inf
windows10-2004-x64
1ViGEmBusDr...us.sys
windows10-2004-x64
1ViGEmBusDr...09.dll
windows10-2004-x64
3ViGEmBusDr...us.cat
windows10-2004-x64
8Carpetas d...ce.exe
windows10-2004-x64
4Carpetas d...64.exe
windows10-2004-x64
4Carpetas d...on.rar
windows10-2004-x64
3devcon.exe
windows10-2004-x64
1Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-es -
resource tags
arch:x64arch:x86image:win10v2004-20240730-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
02-08-2024 09:40
Behavioral task
behavioral1
Sample
Usar tu mando Generico como si fuera uno de playstation 4.rar
Resource
win10v2004-20240730-es
Behavioral task
behavioral2
Sample
Carpetas de Archivos/Comandos.txt
Resource
win10v2004-20240730-es
Behavioral task
behavioral3
Sample
Carpetas de Archivos/VDX_v1.14.3.0_x64_x86_GPDWinEdition.zip
Resource
win10v2004-20240730-es
Behavioral task
behavioral4
Sample
VDX.exe
Resource
win10v2004-20240730-es
Behavioral task
behavioral5
Sample
VDX_x64.exe
Resource
win10v2004-20240730-es
Behavioral task
behavioral6
Sample
Carpetas de Archivos/ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0.zip
Resource
win10v2004-20240730-es
Behavioral task
behavioral7
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/ViGEmBus.inf
Resource
win10v2004-20240730-es
Behavioral task
behavioral8
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/ViGEmBus.sys
Resource
win10v2004-20240730-es
Behavioral task
behavioral9
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/WdfCoinstaller01009.dll
Resource
win10v2004-20240730-es
Behavioral task
behavioral10
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/vigembus.cat
Resource
win10v2004-20240730-es
Behavioral task
behavioral11
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/ViGEmBus.inf
Resource
win10v2004-20240730-es
Behavioral task
behavioral12
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/ViGEmBus.sys
Resource
win10v2004-20240730-es
Behavioral task
behavioral13
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/WdfCoinstaller01009.dll
Resource
win10v2004-20240730-es
Behavioral task
behavioral14
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/vigembus.cat
Resource
win10v2004-20240730-es
Behavioral task
behavioral15
Sample
Carpetas de Archivos/X360CE - 32 Bits/x360ce.exe
Resource
win10v2004-20240730-es
Behavioral task
behavioral16
Sample
Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
Resource
win10v2004-20240730-es
Behavioral task
behavioral17
Sample
Carpetas de Archivos/devcon.rar
Resource
win10v2004-20240730-es
Behavioral task
behavioral18
Sample
devcon.exe
Resource
win10v2004-20240730-es
General
-
Target
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/ViGEmBus.sys
-
Size
47KB
-
MD5
3dc219a6184096ad4dca69aee0012ab3
-
SHA1
56d232daad01982fc53f42567fcc5a2cfc34cf93
-
SHA256
7acbf5c201a565122d06b9f9725720f745fb9cb309b73b633b7a97efee69cea6
-
SHA512
9c07895382d5496176343d4b83c6f2369ed2b1c43ac915aedea3e2ac4bbeb26b25e065e04bbd9bcd52bfbbc02c59c5a233f9cc5d4a7c4ed0f2b515f57dcb869b
-
SSDEEP
768:KrIXKjBN4rm/dcSKIcyleyLJGcyixAR13tqHBaMI2OYc3wheZ:KrCK1Grm0ylVLJGcypR1MFH8gheZ
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0\drivers\x86\ViGEmBus.sys1⤵PID:4908
-
C:\Users\Admin\AppData\Local\Temp\ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0\drivers\x86\ViGEmBus.sysC:\Users\Admin\AppData\Local\Temp\ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0\drivers\x86\ViGEmBus.sys2⤵PID:3688
-