Overview
overview
7Static
static
7FastCopy 5...15.exe
windows7-x64
7FastCopy 5...15.exe
windows10-2004-x64
7FastCopy 5...7z.dll
windows7-x64
3FastCopy 5...7z.dll
windows10-2004-x64
3FastCopy 5...7z.exe
windows7-x64
3FastCopy 5...7z.exe
windows10-2004-x64
3FastCopy 5...06.exe
windows7-x64
3FastCopy 5...06.exe
windows10-2004-x64
3FastCopy 5...00.chm
windows7-x64
1FastCopy 5...00.chm
windows10-2004-x64
1FastCopy 5...��.exe
windows7-x64
1FastCopy 5...��.exe
windows10-2004-x64
1FastCopy 5...��.exe
windows7-x64
3FastCopy 5...��.exe
windows10-2004-x64
3FastCopy 5...88.exe
windows7-x64
3FastCopy 5...88.exe
windows10-2004-x64
3FastCopy 5...64.exe
windows7-x64
1FastCopy 5...64.exe
windows10-2004-x64
1FastCopy 5...73.exe
windows7-x64
3FastCopy 5...73.exe
windows10-2004-x64
3FastCopy 5...64.exe
windows7-x64
1FastCopy 5...64.exe
windows10-2004-x64
1FastCopy 5...88.exe
windows7-x64
3FastCopy 5...88.exe
windows10-2004-x64
3FastCopy 5...64.exe
windows7-x64
1FastCopy 5...64.exe
windows10-2004-x64
1FastCopy 5...01.exe
windows7-x64
3FastCopy 5...01.exe
windows10-2004-x64
3FastCopy 5...64.exe
windows7-x64
1FastCopy 5...64.exe
windows10-2004-x64
1FastCopy 5...er.exe
windows7-x64
3FastCopy 5...er.exe
windows10-2004-x64
3Analysis
-
max time kernel
146s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14-08-2024 00:38
Behavioral task
behavioral1
Sample
FastCopy 5.7.15/FastCopy 5.7.15.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
FastCopy 5.7.15/FastCopy 5.7.15.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7z/7z.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7z/7z.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7z/7z.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7z/7z.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSD_2106.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSD_2106.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSD_RU_170_3900.chm
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSD_RU_170_3900.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSFX��.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSFX��.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSFX��.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSFX��.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_162_3888.exe
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_162_3888.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_162_3888_x64.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_162_3888_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3873.exe
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3873.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3873_x64.exe
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3873_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888.exe
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888_x64.exe
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901.exe
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901_x64.exe
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/ResourceHacker/ResourceHacker.exe
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/ResourceHacker/ResourceHacker.exe
Resource
win10v2004-20240802-en
General
-
Target
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888.exe
-
Size
135KB
-
MD5
39c03006daecfc003348254ab85f178f
-
SHA1
2396f8905a7ece1f1fa2307e15af5f993b6abf96
-
SHA256
0596b9f10e46f95f5d17414466e1b04a8ac9800c0c0c3f2713188a626b42830e
-
SHA512
d7ce8eced522bf4efe8949ccbbe5e1a13c0ef4b6614a5e88d089eb060109c490bf781604d1d32b0547f9429e7b91659d18ada00f34ab8bf485c434a3cad9a9e3
-
SSDEEP
3072:5fDcwDrnbhYNABruIIqk0Zk5AAAAA+wiwgimGx0NcXvSYfnu1Gs0G:5fDcwvlYNAsAuUm5cXKencG1G
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7zsd_All_170_3888.exe