Overview
overview
10Static
static
10VDX.exe
windows7-x64
3VDX.exe
windows10-2004-x64
3VDX_x64.exe
windows7-x64
1VDX_x64.exe
windows10-2004-x64
1ViGEmBusDr...us.sys
windows10-2004-x64
1ViGEmBusDr...09.dll
windows7-x64
1ViGEmBusDr...09.dll
windows10-2004-x64
1ViGEmBusDr...us.sys
windows10-2004-x64
1ViGEmBusDr...09.dll
windows7-x64
3ViGEmBusDr...09.dll
windows10-2004-x64
3Carpetas d...ce.exe
windows7-x64
3Carpetas d...ce.exe
windows10-2004-x64
3Carpetas d...64.exe
windows7-x64
7Carpetas d...64.exe
windows10-2004-x64
1devcon.exe
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
02-08-2024 11:02
Behavioral task
behavioral1
Sample
VDX.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
VDX.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
VDX_x64.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
VDX_x64.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/ViGEmBus.sys
Resource
win10v2004-20240730-en
Behavioral task
behavioral6
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/WdfCoinstaller01009.dll
Resource
win7-20240704-en
Behavioral task
behavioral7
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/WdfCoinstaller01009.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral8
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/ViGEmBus.sys
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/WdfCoinstaller01009.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/WdfCoinstaller01009.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
Carpetas de Archivos/X360CE - 32 Bits/x360ce.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Carpetas de Archivos/X360CE - 32 Bits/x360ce.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
devcon.exe
Resource
win10v2004-20240730-en
General
-
Target
VDX.exe
-
Size
571KB
-
MD5
0ec433ebd5142b440a974b4872a1d1bd
-
SHA1
92a802eb6db2cab4cd1d97000fb05d8d99c44a3c
-
SHA256
d955ff9b4109095f65858989c68c226305d25e6148f63fecd10a850503fd0e17
-
SHA512
ac68a264d4ccc198bcd2c96b45147eeafeb9b2274ef62522d55ddb96446a19d45bf4379ce9934212c3160602945a3a251fb709249aaf143dcf05c8df27403e7a
-
SSDEEP
6144:48dOj0l/h2gzKtTFg6ICZgzEQ6+F1h3ZmkDiRFzD9Mxu32RFYKvq2MZ12cPz+P8:xOwlp2gz4Rg6LZ/+h3ZVit32RaKvgy8
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
VDX.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VDX.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
VDX.exepid process 1908 VDX.exe