Overview
overview
9Static
static
3Duck+Beta.rar
windows7-x64
3Duck+Beta.rar
windows10-2004-x64
3Duck Beta/...In.dll
windows7-x64
1Duck Beta/...In.dll
windows10-2004-x64
1Duck Beta/...ck.exe
windows7-x64
3Duck Beta/...ck.exe
windows10-2004-x64
3Duck Beta/...PI.dll
windows7-x64
1Duck Beta/...PI.dll
windows10-2004-x64
1Duck Beta/...os.txt
windows7-x64
1Duck Beta/...os.txt
windows10-2004-x64
1Duck Beta/...or.exe
windows7-x64
1Duck Beta/...or.exe
windows10-2004-x64
9Duck Beta/...Me.txt
windows7-x64
1Duck Beta/...Me.txt
windows10-2004-x64
1Analysis
-
max time kernel
837s -
max time network
838s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19/08/2024, 16:32
Static task
static1
Behavioral task
behavioral1
Sample
Duck+Beta.rar
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Duck+Beta.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Duck Beta/Beta/Main/CeleryIn.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Duck Beta/Beta/Main/CeleryIn.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Duck Beta/Beta/Main/Duck.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Duck Beta/Beta/Main/Duck.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Duck Beta/Beta/Main/DuckAPI.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Duck Beta/Beta/Main/DuckAPI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Duck Beta/Beta/Main/Executor's Infos.txt
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Duck Beta/Beta/Main/Executor's Infos.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Duck Beta/Beta/Main/Injector.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Duck Beta/Beta/Main/Injector.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Duck Beta/Beta/Main/ReadMe.txt
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Duck Beta/Beta/Main/ReadMe.txt
Resource
win10v2004-20240802-en
General
-
Target
Duck Beta/Beta/Main/Duck.exe
-
Size
10KB
-
MD5
3842a1e2dcf6f0b82fa9f5f3fdabb28d
-
SHA1
049c898aaf7f8c04a6856f02ae9bf6013a11d903
-
SHA256
3438023fab795f92a1a4399d868ed35d694cc0fc874db1acea2ce4f2805138b5
-
SHA512
47866d6cb6946979880c466bbf7cb6f534daa81eff185dbda900912b75ae8aeafe03037a9e2ba6e462f7b775948163de3cc39a152fb6b4d09507c64682d75222
-
SSDEEP
192:rN/0Kvu9GaGEGE0Xhz+G2ZlrHS4kqkr5/c:J/0KvurGEGECFv2ZlrHS4u5/
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Duck.exe