Overview
overview
10Static
static
10VDX.exe
windows7-x64
3VDX.exe
windows10-2004-x64
3VDX_x64.exe
windows7-x64
1VDX_x64.exe
windows10-2004-x64
1ViGEmBusDr...us.sys
windows10-2004-x64
1ViGEmBusDr...09.dll
windows7-x64
1ViGEmBusDr...09.dll
windows10-2004-x64
1ViGEmBusDr...us.sys
windows10-2004-x64
1ViGEmBusDr...09.dll
windows7-x64
3ViGEmBusDr...09.dll
windows10-2004-x64
3Carpetas d...ce.exe
windows7-x64
3Carpetas d...ce.exe
windows10-2004-x64
3Carpetas d...64.exe
windows7-x64
7Carpetas d...64.exe
windows10-2004-x64
1devcon.exe
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
02/08/2024, 11:02
Behavioral task
behavioral1
Sample
VDX.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
VDX.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
VDX_x64.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
VDX_x64.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/ViGEmBus.sys
Resource
win10v2004-20240730-en
Behavioral task
behavioral6
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/WdfCoinstaller01009.dll
Resource
win7-20240704-en
Behavioral task
behavioral7
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/WdfCoinstaller01009.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral8
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/ViGEmBus.sys
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/WdfCoinstaller01009.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/WdfCoinstaller01009.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
Carpetas de Archivos/X360CE - 32 Bits/x360ce.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Carpetas de Archivos/X360CE - 32 Bits/x360ce.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
devcon.exe
Resource
win10v2004-20240730-en
General
-
Target
Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
-
Size
2.8MB
-
MD5
37793bbd313cfbc6b37054be4e2d6e32
-
SHA1
67e4965c019f23847d20fa2e4cc3f9687d0d23de
-
SHA256
b19cd47bdbdc061adef78ac0b624c9c3602bec8806a4541f67d0db08116766bb
-
SHA512
6f91ebad942e25bcefdf0bdc1d2857ed8fb439f0709702ca5ca2bfa27734c889fa1caaad6c4da8935a86e3293a678a933025579f4209ad22ae618f5bb0c90578
-
SSDEEP
49152:IhnPbfJJb4/WG/UbRJJb4/WGmJJb4/WGi0wr+CTZtOTQOYG7UCq3JJK4//GB:IVPXbbGshbbGubbGiBr+4NK+GB
Malware Config
Signatures
-
Loads dropped DLL 6 IoCs
pid Process 2708 x360ce_x64.exe 2708 x360ce_x64.exe 2708 x360ce_x64.exe 2708 x360ce_x64.exe 2708 x360ce_x64.exe 2708 x360ce_x64.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2708 x360ce_x64.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
170B
MD50d19a8cd6af6fd2342a052676b78e086
SHA186401d15af7a025f7f2424da703963474c824f81
SHA2566f82878e92526fd28b6d15a6548b1054080ee5a014d2d39c5f1acabd3814181b
SHA512dca53dd6219852711802e2aa3049b477b91cbd8df588c6c5566ea140bc164eafe7304fbfc06b9ca3a468f3cb2ce117b981e97db16b74f100de2dd8a8ffb60d09
-
Filesize
2KB
MD51e73f5050936f6ad2924f3b7dcdf0582
SHA1695d5e9841cb979cafad4c4fbc44afc451da9b04
SHA256d0a651831e1f76968ca283bf5acb849d7a1010cf403f12f01436aa800a4f2225
SHA51239205d0f28b5b4f918da3dcb1f2454080d6005e672b2d71b4dae0373c35900648d1bdc2fb1df50cbf02dc593c51d2d0c70c6279690b099142fea1e236bbd3531
-
Filesize
19KB
MD53980933975fcd926008a62a59a7d3e79
SHA19868018069f21d6685753204de08f83f50b122be
SHA256efa91ffae86d26414c11db39646617efccb86cb67c474f4ecd90f047d2082f54
SHA51203792a913757acca4b657920c9cbfebd4976a945f12981510ba3de571565930c52697efb59c9436947dcd9ba20f04a769d251cd1fb2c38a270b390233f1d4e5f
-
Filesize
288B
MD5b594104cc7bceea87bb5a7808c7a9aaa
SHA16ce20f2a53d56a00cdd326eedcf0dd0d8a16a824
SHA25618bee60da8b49e9ea93fb75487bfacfb9b50c452fad75008a6ad606f8a52c36c
SHA512972c44ea2764951c637a3481bd91d589fb01a9497048c48930f998d9789b7d2e06dcf4812198f676a6f66b99e03405890ac88e2b5a3aed5f0d3cee18a5b6d3e5
-
Filesize
600B
MD524a1dd3fd9f5cbc5356d30f8715e140a
SHA104f14d2f8b68654343c6da3565c0ac57c664392f
SHA256e72091a6afe99c1875582f1c574c89b1ff32cfb79cf2c86032fc9180d611a868
SHA5127eefefef4958b6b896633ddd6a1e5d27be17b2c515b9e1756f30dc497d4d2b8eb717b7b11a9703657039ed1fa4b65761f7c2d0c1bae2dba54c1993170774e2c3
-
Filesize
806B
MD51e24a3475b49e0d30148785b61c71d20
SHA17f294930b17244c173ca73454cf46f16b2bde741
SHA2565f8828bb1a33b7c2a658de3c93744121f404a0c06d3a3de21a9b509700a38e41
SHA512cd11b45eb0e86dd0c05b2b6440a31f6b7bf39657ae518cf403a420410c36b2f97ff2a8b77f7cee4ff18b209b2f37cf59f001f00d5b753db5f45d998acd7ce5b2
-
Filesize
966B
MD5d9282ce0a9d0c4dbeac6dc7de1f10693
SHA1b794bebbb58e701a6648a83b23a3106e577eaaa5
SHA256e396670f35f5efcd611283652db2b3b1b3ba75168d6ca6c63b135dc06e71dfff
SHA5120de0bd50717962d91aa57d2478fc5c6c6b531c0be29c92f963dde555dd16246e1b2ce183f187c3f7f8986729af1935a9b82a6f073b54d6ddfc5c511db42f4b19
-
Filesize
1KB
MD547ef6b18916a3f8f9cd94b78f04026c2
SHA119e97ab48b97e639b63f58a77340b9ad6c46b3b7
SHA256a6f0995ee20f48bb946faed2179682c238153202869501ae3cf427b7466d6001
SHA512ea06ff7fcd5594465aa1513a429558807fd0f428c40ea37847f677eeef2a817b8f0d223c7cc30d156deeb76a0e3da806225b9f98762f2044fa8abbd355c3219d
-
Filesize
1KB
MD533c03145331653774cd118809f763626
SHA1658e4b8b1260334f04fb0e084c28be24caaa044c
SHA2563ad17a67852ea4ab74337ab0dfe351c2cbc9cf3ffacb0d0dd59690d7fc034f3b
SHA512b49c1e71cc2e5b296b7bec0427f5152ededfcc7f11c2199e7fbbb79266d2ec14bb7afc70e1306e07c0aa7dae5bc6e6494621920c83c07c7d470db3ddac07af44
-
Filesize
142KB
MD5f26b59ba3bece9d04b92415a3205667a
SHA109337ad2b5b345aa75ef32a31c828038fd892166
SHA2562d8e3e39ffa1c5cf15f6a7f6cc8020d00d8277b1c2e61c49443b80fc1fbe97ad
SHA512ebbbe5d7d6fe008ed72415372edb0048745c588268e14dd466fe126b3a1a39d48b44a86fe4900d50d65a479c364e1e32a2e2acfd3329ce1c16e035c197c1dbca