Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
22-08-2024 18:23
Behavioral task
behavioral1
Sample
vbug-master/vbug-AIDE.apk
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
vbug-master/vbug-DS.apk
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
elite.apk
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
fbcr.apk
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
mobelejen.apk
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
vi4a.apk
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
vbug-master/vbug.py
Resource
win11-20240802-en
General
-
Target
vbug-master/vbug-DS.apk
-
Size
5.2MB
-
MD5
8c597c47f9354b830654a2fe4cd5edbc
-
SHA1
0e0f1c450699f481930ee97bf81050870d349239
-
SHA256
dbef5b862ea27ad9756884441b6e5111f0ba192ec2a3462d3b99b563ab23e4b6
-
SHA512
003e5e817052bf7c077b1041f0a807a1b4cfa950ea0746df5d1974d0bef924d91891e1a596a143b740e704a4155272255812355e9096602b4c10fc9966951c63
-
SSDEEP
98304:D/CrCsTW93jM9qa5onP0ZNr0RcEKMcxZIUvEbz68y3UCJJJnv6FRCA:D/XD7a5onINPlNIUMWECzPA
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4312 OpenWith.exe