Overview
overview
10Static
static
3win-airplay.zip
windows7-x64
10win-airplay.zip
windows10-2004-x64
1win-airpla...be.exe
windows7-x64
3win-airpla...be.exe
windows10-2004-x64
3win-airpla...ay.exe
windows7-x64
3win-airpla...ay.exe
windows10-2004-x64
3win-airpla...ur.msi
windows7-x64
6win-airpla...ur.msi
windows10-2004-x64
6win-airpla...64.msi
windows7-x64
6win-airpla...64.msi
windows10-2004-x64
6win-airplay/SDL2.dll
windows7-x64
3win-airplay/SDL2.dll
windows10-2004-x64
3win-airpla...ay.exe
windows7-x64
3win-airpla...ay.exe
windows10-2004-x64
3win-airpla...58.dll
windows7-x64
3win-airpla...58.dll
windows10-2004-x64
3win-airpla...58.dll
windows7-x64
3win-airpla...58.dll
windows10-2004-x64
3win-airpla...56.dll
windows7-x64
3win-airpla...56.dll
windows10-2004-x64
3win-airplay/cairo.dll
windows7-x64
3win-airplay/cairo.dll
windows10-2004-x64
3win-airpla...ig.dll
windows7-x64
3win-airpla...ig.dll
windows10-2004-x64
3win-airpla...pe.dll
windows7-x64
3win-airpla...pe.dll
windows10-2004-x64
3win-airpla...nv.dll
windows7-x64
3win-airpla...nv.dll
windows10-2004-x64
3win-airpla...st.dll
windows7-x64
3win-airpla...st.dll
windows10-2004-x64
3win-airpla...l2.dll
windows7-x64
3win-airpla...l2.dll
windows10-2004-x64
3Resubmissions
03-08-2024 19:46
240803-yg8nestbqr 1003-08-2024 19:44
240803-ygbcxsxhld 603-08-2024 19:41
240803-yd6pnaxgpa 6Analysis
-
max time kernel
438s -
max time network
440s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03-08-2024 19:46
Static task
static1
Behavioral task
behavioral1
Sample
win-airplay.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
win-airplay.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
win-airplay/Blueberry-Airplay-Youtube.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
win-airplay/Blueberry-Airplay-Youtube.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
win-airplay/Blueberry-Airplay.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
win-airplay/Blueberry-Airplay.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
win-airplay/Bonjour.msi
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
win-airplay/Bonjour.msi
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
win-airplay/Bonjour64.msi
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
win-airplay/Bonjour64.msi
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
win-airplay/SDL2.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
win-airplay/SDL2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
win-airplay/airplay.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
win-airplay/airplay.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
win-airplay/avcodec-58.dll
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
win-airplay/avcodec-58.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
win-airplay/avformat-58.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
win-airplay/avformat-58.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
win-airplay/avutil-56.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
win-airplay/avutil-56.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
win-airplay/cairo.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
win-airplay/cairo.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
win-airplay/fontconfig.dll
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
win-airplay/fontconfig.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
win-airplay/freetype.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
win-airplay/freetype.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
win-airplay/libiconv.dll
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
win-airplay/libiconv.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
win-airplay/libplist.dll
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
win-airplay/libplist.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
win-airplay/libxml2.dll
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
win-airplay/libxml2.dll
Resource
win10v2004-20240802-en
General
-
Target
win-airplay/Blueberry-Airplay.exe
-
Size
463KB
-
MD5
d8b60b34a2ba716d06ccd41716e330e2
-
SHA1
2ee2007f61e93a81aada7e875e08c50c0b85c2e7
-
SHA256
02e38cf1932bab2cd485234b0b4442c413d6518203d806988f432856f979fc8a
-
SHA512
f903f78c287d45cef8bf2b2865d9265fc447a4ea2b1ad56b2dc2c59811ebdcc49bc64aa68049a61677fa35826d46da6337936dfb4b44b127e731532b440e5d33
-
SSDEEP
6144:i1z7j62HxsgYZhWR42gGn2So70wS9qaYTGAU+GL+3H:gfoGto70/gP3H
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
Blueberry-Airplay.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Blueberry-Airplay.exe