Overview
overview
7Static
static
77514727d5b...60.exe
windows7-x64
37514727d5b...60.exe
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/XML.dll
windows7-x64
3$PLUGINSDIR/XML.dll
windows10-2004-x64
3$PLUGINSDI...al.ini
windows7-x64
1$PLUGINSDI...al.ini
windows10-2004-x64
$PLUGINSDI...er.bmp
windows7-x64
3$PLUGINSDI...er.bmp
windows10-2004-x64
7$PLUGINSDI...ll.ini
windows7-x64
1$PLUGINSDI...ll.ini
windows10-2004-x64
1$PLUGINSDIR/wel.ini
windows7-x64
1$PLUGINSDIR/wel.ini
windows10-2004-x64
1$TEMP/1.bmp
windows7-x64
3$TEMP/1.bmp
windows10-2004-x64
7$TEMP/2.bmp
windows7-x64
3$TEMP/2.bmp
windows10-2004-x64
7$TEMP/3.bmp
windows7-x64
3$TEMP/3.bmp
windows10-2004-x64
7$TEMP/4.bmp
windows7-x64
3$TEMP/4.bmp
windows10-2004-x64
7$TEMP/ioSpecial.ini
windows7-x64
1$TEMP/ioSpecial.ini
windows10-2004-x64
1Resubmissions
29-08-2024 00:34
240829-aw9bhavbrc 708-08-2024 20:23
240808-y6jetsygmm 725-01-2024 17:21
240125-vxdw7scdfm 10Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
29-08-2024 00:34
Behavioral task
behavioral1
Sample
7514727d5b5377f75d5c70e571580960.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7514727d5b5377f75d5c70e571580960.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Dialer.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Dialer.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/XML.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/XML.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/ioSpecial.ini
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/ioSpecial.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/realInstall.ini
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/realInstall.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/wel.ini
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/wel.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
$TEMP/1.bmp
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
$TEMP/1.bmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
$TEMP/2.bmp
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
$TEMP/2.bmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
$TEMP/3.bmp
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
$TEMP/3.bmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
$TEMP/4.bmp
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
$TEMP/4.bmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
$TEMP/ioSpecial.ini
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
$TEMP/ioSpecial.ini
Resource
win10v2004-20240802-en
General
-
Target
$TEMP/2.bmp
-
Size
1KB
-
MD5
e95e4007f5a2fca582ecd0c1928a046e
-
SHA1
5409ac8fa1cfed861570d828799b821a06adb42b
-
SHA256
ece2dc31ad32a4baab19c06e15553bcf65777f8ac17d9486cbc763aefcfa5c3a
-
SHA512
a40fb5e4d718a8ae8863e7085a018d67afceec2cd8cd8f5e1c635380adae62abd73b031cc81a8eeb7ca7a552ad26b369fc76d3222e1b15522aa5fbab9ed14696
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
rundll32.exepid process 2320 rundll32.exe