Overview
overview
9Static
static
3Beat Bange...es.url
windows10-1703-x64
1Beat Bange...es.url
windows10-1703-x64
1Beat Bange...up.exe
windows10-1703-x64
7Beat Bange...up.exe
windows10-1703-x64
7Beat Bange...ll.bat
windows10-1703-x64
7Beat Bange...st.exe
windows10-1703-x64
6Beat Bange...64.exe
windows10-1703-x64
7Beat Bange...86.exe
windows10-1703-x64
7Beat Bange...64.exe
windows10-1703-x64
9Beat Bange...86.exe
windows10-1703-x64
7Beat Bange...64.exe
windows10-1703-x64
7Beat Bange...86.exe
windows10-1703-x64
7Beat Bange...64.exe
windows10-1703-x64
7Beat Bange...86.exe
windows10-1703-x64
7Beat Bange...64.exe
windows10-1703-x64
7Beat Bange...86.exe
windows10-1703-x64
7Beat Bange...64.exe
windows10-1703-x64
4Beat Bange...86.exe
windows10-1703-x64
4Beat Bange...64.exe
windows10-1703-x64
7Beat Bange...86.exe
windows10-1703-x64
7Beat Bange...64.exe
windows10-1703-x64
7Beat Bange...86.exe
windows10-1703-x64
7Beat Bange...st.msi
windows10-1703-x64
6Beat Bange...le.exe
windows10-1703-x64
1Beat Bange...er.exe
windows10-1703-x64
1Beat Bange...eg.exe
windows10-1703-x64
1Beat Bange...be.exe
windows10-1703-x64
1Analysis
-
max time kernel
146s -
max time network
139s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
02-09-2024 19:23
Static task
static1
Behavioral task
behavioral1
Sample
Beat Banger - SteamGG.NET/SteamGG – Free Download Pre-installed Steam Games.url
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Beat Banger - SteamGG.NET/_Redist/SteamGG – Free Download Pre-installed Steam Games.url
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Beat Banger - SteamGG.NET/_Redist/dotNetFx40_Full_setup.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Beat Banger - SteamGG.NET/_Redist/dxwebsetup.exe
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Beat Banger - SteamGG.NET/_Redist/install_all.bat
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
Beat Banger - SteamGG.NET/_Redist/oalinst.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2005_x64.exe
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2005_x86.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2008_x64.exe
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2008_x86.exe
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2010_x64.exe
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2010_x86.exe
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2012_x64.exe
Resource
win10-20240611-en
Behavioral task
behavioral14
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2012_x86.exe
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2013_x64.exe
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2013_x86.exe
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2015_2017_2019_2022_x64.exe
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist2015_2017_2019_2022_x86.exe
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist_2015-2019_x64.exe
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist_2015-2019_x86.exe
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist_x64.exe
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
Beat Banger - SteamGG.NET/_Redist/vcredist_x86.exe
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
Beat Banger - SteamGG.NET/_Redist/xnafx40_redist.msi
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
Beat Banger - SteamGG.NET/beatbanger.console.exe
Resource
win10-20240611-en
Behavioral task
behavioral25
Sample
Beat Banger - SteamGG.NET/beatbanger.exe
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
Beat Banger - SteamGG.NET/bin/win64/ffmpeg.exe
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
Beat Banger - SteamGG.NET/bin/win64/ffprobe.exe
Resource
win10-20240611-en
General
-
Target
Beat Banger - SteamGG.NET/beatbanger.exe
-
Size
189.2MB
-
MD5
75e34ca5c1c7be619c01169e656ef271
-
SHA1
f9d3ca021469467f6bd3ce551f10ce2c4d51e804
-
SHA256
d4653febeeb60d35db6755f578a9fb923657270648c9c5129ae81a1430a3e633
-
SHA512
0b3a16d90c9c29b25df4593e371bcf2e372f61fd088378c760389ade461e7e6cb43bfc302f772d820eec3807dc615bc331fe0714e19c436eb3308158c8e24189
-
SSDEEP
3145728:f4gNkdnqqdvAr+GgRdpf+eV656E4USZQ6IdhYAuoRx:fmdn9mqhRjf+eVIujI4AuoT
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
AUDIODG.EXEdescription pid process Token: 33 212 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 212 AUDIODG.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
beatbanger.exepid process 5088 beatbanger.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
beatbanger.exepid process 5088 beatbanger.exe 5088 beatbanger.exe 5088 beatbanger.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Beat Banger - SteamGG.NET\beatbanger.exe"C:\Users\Admin\AppData\Local\Temp\Beat Banger - SteamGG.NET\beatbanger.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:5088
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2f81⤵
- Suspicious use of AdjustPrivilegeToken
PID:212
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256B
MD50b9328ee5fe8aca8b671a526c0320a34
SHA1d15ca3909180b246054676799933ef23085f4264
SHA256699f4315b5048c6721e90fee12a6a178aa2c3bf3521eac5cd713b548d3fe4b14
SHA512e5460909810ee87146d157dcd527a038c23380f4dc989d9c3236e0503842e7f855f09f0b95244c913b82bd67bfc1f956196cdb443a39627121927b885dbaa83e