Overview
overview
4Static
static
3NAudio.dll
windows7-x64
1NAudio.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1ThemeEdito...on.dll
windows7-x64
1ThemeEdito...on.dll
windows10-2004-x64
1ThemeEditor.WPF.exe
windows7-x64
3ThemeEditor.WPF.exe
windows10-2004-x64
3ThirdParty...nt.doc
windows7-x64
4ThirdParty...nt.doc
windows10-2004-x64
1ThirdParty...de.dll
windows7-x64
3ThirdParty...de.dll
windows10-2004-x64
3ThirdParty...-0.dll
windows7-x64
3ThirdParty...-0.dll
windows10-2004-x64
3ThirdParty...is.dll
windows7-x64
3ThirdParty...is.dll
windows10-2004-x64
3ThirdParty...st.exe
windows7-x64
1ThirdParty...st.exe
windows10-2004-x64
3Xceed.Wpf.Toolkit.dll
windows7-x64
1Xceed.Wpf.Toolkit.dll
windows10-2004-x64
1es/ThemeEd...es.dll
windows7-x64
1es/ThemeEd...es.dll
windows10-2004-x64
1fr/ThemeEd...es.dll
windows7-x64
1fr/ThemeEd...es.dll
windows10-2004-x64
1it/ThemeEd...es.dll
windows7-x64
1it/ThemeEd...es.dll
windows10-2004-x64
1pt-BR/Them...es.dll
windows7-x64
1pt-BR/Them...es.dll
windows10-2004-x64
1Analysis
-
max time kernel
13s -
max time network
15s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2024, 16:28
Static task
static1
Behavioral task
behavioral1
Sample
NAudio.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
NAudio.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Newtonsoft.Json.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
ThemeEditor.Common.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
ThemeEditor.Common.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
ThemeEditor.WPF.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
ThemeEditor.WPF.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
ThirdParty/vgmstream/g7221-siren7_14_G719_license_agreement.doc
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
ThirdParty/vgmstream/g7221-siren7_14_G719_license_agreement.doc
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
ThirdParty/vgmstream/libg7221_decode.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
ThirdParty/vgmstream/libg7221_decode.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
ThirdParty/vgmstream/libmpg123-0.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
ThirdParty/vgmstream/libmpg123-0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
ThirdParty/vgmstream/libvorbis.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
ThirdParty/vgmstream/libvorbis.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
ThirdParty/vgmstream/test.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
ThirdParty/vgmstream/test.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Xceed.Wpf.Toolkit.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Xceed.Wpf.Toolkit.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
es/ThemeEditor.WPF.resources.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
es/ThemeEditor.WPF.resources.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
fr/ThemeEditor.WPF.resources.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
fr/ThemeEditor.WPF.resources.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
it/ThemeEditor.WPF.resources.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
it/ThemeEditor.WPF.resources.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
pt-BR/ThemeEditor.WPF.resources.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
pt-BR/ThemeEditor.WPF.resources.dll
Resource
win10v2004-20240802-en
General
-
Target
ThemeEditor.WPF.exe
-
Size
1.1MB
-
MD5
98ca0b591bfbbc7a2f9af3c80f73a2c1
-
SHA1
4f7aa745fb48ed9c5737970d86e6dcdf04e7b569
-
SHA256
5fd30ab4037b251bf2ccf613c68c3b091df80c4aa7313a507bc58fcad7090067
-
SHA512
78d4b16ae44bdba054e93036f1d83acab231234fbe7e39ef5113feb8650461c809c34a78f44f3363a7d1daccdb06185c782c25340091e3364cd4112685509d81
-
SSDEEP
6144:DYwHGA5hofbxbgOJNofyYHkS2y3fDeGDMO65fXfwVSDiMO65GXfwV:8wHGA5hoYYry3fDesMOUfv5iMOUGv
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ThemeEditor.WPF.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1676 ThemeEditor.WPF.exe