Overview
overview
10Static
static
3ExxxxSet_up.exe
windows7-x64
3ExxxxSet_up.exe
windows10-2004-x64
10UP/AspNetM...ni.dll
windows7-x64
1UP/AspNetM...ni.dll
windows10-2004-x64
1UP/AudioEn...er.dll
windows10-2004-x64
1UP/AudioEng.dll
windows10-2004-x64
1UP/AudioSes.dll
windows10-2004-x64
1UP/AuthFWSnapin.dll
windows7-x64
1UP/AuthFWSnapin.dll
windows10-2004-x64
1UP/audiosrv.dll
windows10-2004-x64
1UP/authfwcfg.dll
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07/09/2024, 19:49
Static task
static1
Behavioral task
behavioral1
Sample
ExxxxSet_up.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ExxxxSet_up.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
UP/AspNetMMCExt.ni.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
UP/AspNetMMCExt.ni.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
UP/AudioEndpointBuilder.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
UP/AudioEng.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
UP/AudioSes.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
UP/AuthFWSnapin.dll
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
UP/AuthFWSnapin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
UP/audiosrv.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
UP/authfwcfg.dll
Resource
win10v2004-20240802-en
General
-
Target
UP/AudioSes.dll
-
Size
1.3MB
-
MD5
5e0464fc5c7c166d7c2394e5b4688489
-
SHA1
60f81513ed2e3800c7bfd1373abccf1f9f5c12af
-
SHA256
9f3984a65e7f5f1ac96507f89dd121fcb51ceb3a728c8014fd82adcd65a7db11
-
SHA512
0eed33bf2de011405b1cc80dacc4a6b170af4d3ba1943c6c327ea676bb982ca415448665b24407102fd72ffe94479fbcca8c4ddec66ae9476b6c6d2734d484ed
-
SSDEEP
24576:Q1PeMkk1qO/VNy/NQBPkX4Hpjlb9BdS5vYs1:ePF5qO/VNOL4HpjEvYs1
Malware Config
Signatures
-
Modifies registry class 3 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{41FCCC3A-1FA1-4949-953A-6EE61C46A4D1} regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{41FCCC3A-1FA1-4949-953A-6EE61C46A4D1}\Version regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID regsvr32.exe