Overview
overview
4Static
static
3NAudio.dll
windows7-x64
1NAudio.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1ThemeEdito...on.dll
windows7-x64
1ThemeEdito...on.dll
windows10-2004-x64
1ThemeEditor.WPF.exe
windows7-x64
3ThemeEditor.WPF.exe
windows10-2004-x64
3ThirdParty...nt.doc
windows7-x64
4ThirdParty...nt.doc
windows10-2004-x64
1ThirdParty...de.dll
windows7-x64
3ThirdParty...de.dll
windows10-2004-x64
3ThirdParty...-0.dll
windows7-x64
3ThirdParty...-0.dll
windows10-2004-x64
3ThirdParty...is.dll
windows7-x64
3ThirdParty...is.dll
windows10-2004-x64
3ThirdParty...st.exe
windows7-x64
1ThirdParty...st.exe
windows10-2004-x64
3Xceed.Wpf.Toolkit.dll
windows7-x64
1Xceed.Wpf.Toolkit.dll
windows10-2004-x64
1es/ThemeEd...es.dll
windows7-x64
1es/ThemeEd...es.dll
windows10-2004-x64
1fr/ThemeEd...es.dll
windows7-x64
1fr/ThemeEd...es.dll
windows10-2004-x64
1it/ThemeEd...es.dll
windows7-x64
1it/ThemeEd...es.dll
windows10-2004-x64
1pt-BR/Them...es.dll
windows7-x64
1pt-BR/Them...es.dll
windows10-2004-x64
1Analysis
-
max time kernel
94s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02-09-2024 16:28
Static task
static1
Behavioral task
behavioral1
Sample
NAudio.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
NAudio.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Newtonsoft.Json.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
ThemeEditor.Common.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
ThemeEditor.Common.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
ThemeEditor.WPF.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
ThemeEditor.WPF.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
ThirdParty/vgmstream/g7221-siren7_14_G719_license_agreement.doc
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
ThirdParty/vgmstream/g7221-siren7_14_G719_license_agreement.doc
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
ThirdParty/vgmstream/libg7221_decode.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
ThirdParty/vgmstream/libg7221_decode.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
ThirdParty/vgmstream/libmpg123-0.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
ThirdParty/vgmstream/libmpg123-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
ThirdParty/vgmstream/libvorbis.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
ThirdParty/vgmstream/libvorbis.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
ThirdParty/vgmstream/test.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
ThirdParty/vgmstream/test.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Xceed.Wpf.Toolkit.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Xceed.Wpf.Toolkit.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
es/ThemeEditor.WPF.resources.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
es/ThemeEditor.WPF.resources.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
fr/ThemeEditor.WPF.resources.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
fr/ThemeEditor.WPF.resources.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
it/ThemeEditor.WPF.resources.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
it/ThemeEditor.WPF.resources.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
pt-BR/ThemeEditor.WPF.resources.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
pt-BR/ThemeEditor.WPF.resources.dll
Resource
win10v2004-20240802-en
General
-
Target
ThirdParty/vgmstream/test.exe
-
Size
470KB
-
MD5
d535ba8e7955912e4cc2eec47224a426
-
SHA1
e594df74860a3440986d39363b67fe7ae95b56ac
-
SHA256
89dfb4d406dc62e38001bb0108c4c8e9d37b1d6ba766632475c6d9b8e69e8809
-
SHA512
5f33d65b0c90fd9ef5a36ef9d1e695de5f4951cf59a71226b0221caba634fbbe20562e4ba13791342ce4f9bdaef665d3d7a1b0e9200a78414737d6a5e66bf3d1
-
SSDEEP
12288:dt98KfNRRX726uf5xCt0ZHKLACsNiMoICAAFz19BP861:nX726uf5xCt09qVssMoICFz1Hd
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language test.exe