Overview
overview
10Static
static
10VDX.exe
windows7-x64
3VDX.exe
windows10-2004-x64
3VDX_x64.exe
windows7-x64
1VDX_x64.exe
windows10-2004-x64
1ViGEmBusDr...us.sys
windows10-2004-x64
1ViGEmBusDr...09.dll
windows7-x64
1ViGEmBusDr...09.dll
windows10-2004-x64
1ViGEmBusDr...us.sys
windows10-2004-x64
1ViGEmBusDr...09.dll
windows7-x64
3ViGEmBusDr...09.dll
windows10-2004-x64
3Carpetas d...ce.exe
windows7-x64
3Carpetas d...ce.exe
windows10-2004-x64
3Carpetas d...64.exe
windows7-x64
7Carpetas d...64.exe
windows10-2004-x64
1devcon.exe
windows10-2004-x64
1Analysis
- max time kernel
148s - max time network
118s - platform
windows7_x64 - resource
win7-20240705-en - resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system - submitted
02/08/2024, 11:02
Behavioral task
behavioral1
Sample
VDX.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
VDX.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
VDX_x64.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
VDX_x64.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/ViGEmBus.sys
Resource
win10v2004-20240730-en
Behavioral task
behavioral6
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/WdfCoinstaller01009.dll
Resource
win7-20240704-en
Behavioral task
behavioral7
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x64/WdfCoinstaller01009.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral8
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/ViGEmBus.sys
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/WdfCoinstaller01009.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
ViGEmBusDriver_signed_Win7-10_x86_x64_v1.13.0.0/drivers/x86/WdfCoinstaller01009.dll
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
Carpetas de Archivos/X360CE - 32 Bits/x360ce.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Carpetas de Archivos/X360CE - 32 Bits/x360ce.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
devcon.exe
Resource
win10v2004-20240730-en
General
- Target Carpetas de Archivos/X360CE - 64 Bits/x360ce_x64.exe
- Size 2.8MB
- Sample240802-m5hlcswamn
- SHA256 b19cd47bdbdc061adef78ac0b624c9c3602bec8806a4541f67d0db08116766bb
- MD5 37793bbd313cfbc6b37054be4e2d6e32
- SHA1 67e4965c019f23847d20fa2e4cc3f9687d0d23de
- SHA512 6f91ebad942e25bcefdf0bdc1d2857ed8fb439f0709702ca5ca2bfa27734c889fa1caaad6c4da8935a86e3293a678a933025579f4209ad22ae618f5bb0c90578
- SSDEEP 49152:IhnPbfJJb4/WG/UbRJJb4/WGmJJb4/WGi0wr+CTZtOTQOYG7UCq3JJK4//GB:IVPXbbGshbbGubbGiBr+4NK+GB
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped DLL 6 IoCs
pid Process 2708 x360ce_x64.exe 2708 x360ce_x64.exe 2708 x360ce_x64.exe 2708 x360ce_x64.exe 2708 x360ce_x64.exe 2708 x360ce_x64.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2708 x360ce_x64.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 170B
- SHA256 6f82878e92526fd28b6d15a6548b1054080ee5a014d2d39c5f1acabd3814181b
- MD5 0d19a8cd6af6fd2342a052676b78e086
- SHA1 86401d15af7a025f7f2424da703963474c824f81
- SHA512 dca53dd6219852711802e2aa3049b477b91cbd8df588c6c5566ea140bc164eafe7304fbfc06b9ca3a468f3cb2ce117b981e97db16b74f100de2dd8a8ffb60d09
- MD5 SHA1 SHA512
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 2KB
- SHA256 d0a651831e1f76968ca283bf5acb849d7a1010cf403f12f01436aa800a4f2225
- MD5 1e73f5050936f6ad2924f3b7dcdf0582
- SHA1 695d5e9841cb979cafad4c4fbc44afc451da9b04
- SHA512 39205d0f28b5b4f918da3dcb1f2454080d6005e672b2d71b4dae0373c35900648d1bdc2fb1df50cbf02dc593c51d2d0c70c6279690b099142fea1e236bbd3531
- MD5 SHA1 SHA512
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 19KB
- SHA256 efa91ffae86d26414c11db39646617efccb86cb67c474f4ecd90f047d2082f54
- MD5 3980933975fcd926008a62a59a7d3e79
- SHA1 9868018069f21d6685753204de08f83f50b122be
- SHA512 03792a913757acca4b657920c9cbfebd4976a945f12981510ba3de571565930c52697efb59c9436947dcd9ba20f04a769d251cd1fb2c38a270b390233f1d4e5f
- SSDEEP 384:7ZoZvZsZCZSZsxLZ8ZyZURYyzyHyXmlpfHusLaUbriilJQKEEhVEOzBB15ekASY2:69kF0TyYlIdxFRRTHraT
- MD5 SHA1 SHA512 SSDEEP
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 288B
- SHA256 18bee60da8b49e9ea93fb75487bfacfb9b50c452fad75008a6ad606f8a52c36c
- MD5 b594104cc7bceea87bb5a7808c7a9aaa
- SHA1 6ce20f2a53d56a00cdd326eedcf0dd0d8a16a824
- SHA512 972c44ea2764951c637a3481bd91d589fb01a9497048c48930f998d9789b7d2e06dcf4812198f676a6f66b99e03405890ac88e2b5a3aed5f0d3cee18a5b6d3e5
- MD5 SHA1 SHA512
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 600B
- SHA256 e72091a6afe99c1875582f1c574c89b1ff32cfb79cf2c86032fc9180d611a868
- MD5 24a1dd3fd9f5cbc5356d30f8715e140a
- SHA1 04f14d2f8b68654343c6da3565c0ac57c664392f
- SHA512 7eefefef4958b6b896633ddd6a1e5d27be17b2c515b9e1756f30dc497d4d2b8eb717b7b11a9703657039ed1fa4b65761f7c2d0c1bae2dba54c1993170774e2c3
- MD5 SHA1 SHA512
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 806B
- SHA256 5f8828bb1a33b7c2a658de3c93744121f404a0c06d3a3de21a9b509700a38e41
- MD5 1e24a3475b49e0d30148785b61c71d20
- SHA1 7f294930b17244c173ca73454cf46f16b2bde741
- SHA512 cd11b45eb0e86dd0c05b2b6440a31f6b7bf39657ae518cf403a420410c36b2f97ff2a8b77f7cee4ff18b209b2f37cf59f001f00d5b753db5f45d998acd7ce5b2
- MD5 SHA1 SHA512
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 966B
- SHA256 e396670f35f5efcd611283652db2b3b1b3ba75168d6ca6c63b135dc06e71dfff
- MD5 d9282ce0a9d0c4dbeac6dc7de1f10693
- SHA1 b794bebbb58e701a6648a83b23a3106e577eaaa5
- SHA512 0de0bd50717962d91aa57d2478fc5c6c6b531c0be29c92f963dde555dd16246e1b2ce183f187c3f7f8986729af1935a9b82a6f073b54d6ddfc5c511db42f4b19
- MD5 SHA1 SHA512
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 1KB
- SHA256 a6f0995ee20f48bb946faed2179682c238153202869501ae3cf427b7466d6001
- MD5 47ef6b18916a3f8f9cd94b78f04026c2
- SHA1 19e97ab48b97e639b63f58a77340b9ad6c46b3b7
- SHA512 ea06ff7fcd5594465aa1513a429558807fd0f428c40ea37847f677eeef2a817b8f0d223c7cc30d156deeb76a0e3da806225b9f98762f2044fa8abbd355c3219d
- MD5 SHA1 SHA512
- Path C:\ProgramData\X360CE\x360ce.gdb
- Size 1KB
- SHA256 3ad17a67852ea4ab74337ab0dfe351c2cbc9cf3ffacb0d0dd59690d7fc034f3b
- MD5 33c03145331653774cd118809f763626
- SHA1 658e4b8b1260334f04fb0e084c28be24caaa044c
- SHA512 b49c1e71cc2e5b296b7bec0427f5152ededfcc7f11c2199e7fbbb79266d2ec14bb7afc70e1306e07c0aa7dae5bc6e6494621920c83c07c7d470db3ddac07af44
- MD5 SHA1 SHA512
- Path \Users\Admin\AppData\Local\Temp\xinput_X86.tmp.dll
- Size 142KB
- SHA256 2d8e3e39ffa1c5cf15f6a7f6cc8020d00d8277b1c2e61c49443b80fc1fbe97ad
- MD5 f26b59ba3bece9d04b92415a3205667a
- SHA1 09337ad2b5b345aa75ef32a31c828038fd892166
- SHA512 ebbbe5d7d6fe008ed72415372edb0048745c588268e14dd466fe126b3a1a39d48b44a86fe4900d50d65a479c364e1e32a2e2acfd3329ce1c16e035c197c1dbca
- SSDEEP 3072:/sZZ9z1L0ZMBkQTV0ebWN0fwC+INtm3A3TGzOpOAR1A0tWgKB:/sZZ11AOB93wCltm3epOAR1o
- MD5 SHA1 SHA512 SSDEEP