Overview
overview
7Static
static
738 34 35/ERROR845.exe
windows7-x64
738 34 35/M...ft.jar
windows7-x64
138 34 35/n...32.dll
windows7-x64
738 34 35/n...64.dll
windows7-x64
138 34 35/n...x8.dll
windows7-x64
338 34 35/n...64.dll
windows7-x64
138 34 35/n...aw.dll
windows7-x64
338 34 35/n...64.dll
windows7-x64
138 34 35/n...gl.dll
windows7-x64
738 34 35/n...64.dll
windows7-x64
1winrar-x64-701.exe
windows7-x64
1Analysis
-
max time kernel
0s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
20-08-2024 16:48
Behavioral task
behavioral1
Sample
38 34 35/ERROR845.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38 34 35/Minecraft.jar
Resource
win7-20240708-en
Behavioral task
behavioral3
Sample
38 34 35/natives/OpenAL32.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
38 34 35/natives/OpenAL64.dll
Resource
win7-20240705-en
Behavioral task
behavioral5
Sample
38 34 35/natives/jinput-dx8.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
38 34 35/natives/jinput-dx8_64.dll
Resource
win7-20240708-en
Behavioral task
behavioral7
Sample
38 34 35/natives/jinput-raw.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
38 34 35/natives/jinput-raw_64.dll
Resource
win7-20240729-en
Behavioral task
behavioral9
Sample
38 34 35/natives/lwjgl.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
38 34 35/natives/lwjgl64.dll
Resource
win7-20240708-en
Behavioral task
behavioral11
Sample
winrar-x64-701.exe
Resource
win7-20240705-en
General
-
Target
38 34 35/ERROR845.exe
-
Size
50KB
-
MD5
4164ae13f1d6028e3545e1775b286597
-
SHA1
96fbbb6cdc60ced0a41792a8b56e4827e965a7aa
-
SHA256
21a9016c03fa078a14741f76d8488ceb2193d95801947381406e28f1818880be
-
SHA512
29a801dd56e2ba312cb122b213cf6718cee3c6beb68b5b7e9c7bed71d9a2cc406bd4e4072acb7b08dbdc0e7c63b1826af1fe576521766f7d01c489bc11cadb6a
-
SSDEEP
1536:npfEKNCj6VoJl9Go5K7s4Nu3Nnouy8Ps6O:nVZ/VGS7rN+1outU
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2404-0-0x0000000000400000-0x0000000000420000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ERROR845.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\38 34 35\ERROR845.exe"C:\Users\Admin\AppData\Local\Temp\38 34 35\ERROR845.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2404 -
C:\Windows\system32\cmd.exe"C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\F75A.tmp\F75B.tmp\F75C.bat "C:\Users\Admin\AppData\Local\Temp\38 34 35\ERROR845.exe""2⤵PID:268
-