Overview
overview
7Static
static
7FastCopy 5...15.exe
windows7-x64
7FastCopy 5...15.exe
windows10-2004-x64
7FastCopy 5...7z.dll
windows7-x64
3FastCopy 5...7z.dll
windows10-2004-x64
3FastCopy 5...7z.exe
windows7-x64
3FastCopy 5...7z.exe
windows10-2004-x64
3FastCopy 5...06.exe
windows7-x64
3FastCopy 5...06.exe
windows10-2004-x64
3FastCopy 5...00.chm
windows7-x64
1FastCopy 5...00.chm
windows10-2004-x64
1FastCopy 5...��.exe
windows7-x64
1FastCopy 5...��.exe
windows10-2004-x64
1FastCopy 5...��.exe
windows7-x64
3FastCopy 5...��.exe
windows10-2004-x64
3FastCopy 5...88.exe
windows7-x64
3FastCopy 5...88.exe
windows10-2004-x64
3FastCopy 5...64.exe
windows7-x64
1FastCopy 5...64.exe
windows10-2004-x64
1FastCopy 5...73.exe
windows7-x64
3FastCopy 5...73.exe
windows10-2004-x64
3FastCopy 5...64.exe
windows7-x64
1FastCopy 5...64.exe
windows10-2004-x64
1FastCopy 5...88.exe
windows7-x64
3FastCopy 5...88.exe
windows10-2004-x64
3FastCopy 5...64.exe
windows7-x64
1FastCopy 5...64.exe
windows10-2004-x64
1FastCopy 5...01.exe
windows7-x64
3FastCopy 5...01.exe
windows10-2004-x64
3FastCopy 5...64.exe
windows7-x64
1FastCopy 5...64.exe
windows10-2004-x64
1FastCopy 5...er.exe
windows7-x64
3FastCopy 5...er.exe
windows10-2004-x64
3Analysis
-
max time kernel
147s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14-08-2024 00:38
Behavioral task
behavioral1
Sample
FastCopy 5.7.15/FastCopy 5.7.15.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
FastCopy 5.7.15/FastCopy 5.7.15.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7z/7z.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7z/7z.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7z/7z.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7z/7z.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSD_2106.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSD_2106.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSD_RU_170_3900.chm
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSD_RU_170_3900.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSFX��.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSFX��.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSFX��.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zSFX��.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_162_3888.exe
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_162_3888.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_162_3888_x64.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_162_3888_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3873.exe
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3873.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3873_x64.exe
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3873_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888.exe
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888_x64.exe
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_170_3888_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901.exe
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901_x64.exe
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/ResourceHacker/ResourceHacker.exe
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/ResourceHacker/ResourceHacker.exe
Resource
win10v2004-20240802-en
General
-
Target
FastCopy 5.7.15_x86_x64_2in1ɫļز/Bin/7zSFX/7zsd_All_171_3901.exe
-
Size
144KB
-
MD5
6b62f6a090c80f27e120fd543016affd
-
SHA1
d70e0ff060ee5380112a5a35d75ab79286074963
-
SHA256
42e7dec05e33ec287f27da546149324ac98eaa3189ac15bee181fe538333af74
-
SHA512
510793f8e9d908753860b71061a6c56a544840ad02348ce7e4cb7e232fc5284990c5cabfb187ec2cd8f7fc92901f7bc1247ca59f0f13ab5911fbab1d7a99904f
-
SSDEEP
3072:m4zux380TahgerG/Iv0mAAAAA+Tc7Al+uLDNAAvx13Mnp6cqru:m4zsv23G/Iv0alTNj+nAZ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7zsd_All_171_3901.exe