Overview
overview
7Static
static
3New Compre...er.zip
windows7-x64
1New Compre...er.zip
windows10-2004-x64
1Stardock C...FX.exe
windows7-x64
1Stardock C...FX.exe
windows10-2004-x64
3Stardock C...ig.exe
windows7-x64
1Stardock C...ig.exe
windows10-2004-x64
3Stardock C...Me.txt
windows7-x64
1Stardock C...Me.txt
windows10-2004-x64
1Stardock C...up.exe
windows7-x64
7Stardock C...up.exe
windows10-2004-x64
7winrar-x64-701.exe
windows7-x64
1winrar-x64-701.exe
windows10-2004-x64
1Analysis
-
max time kernel
1320s -
max time network
1143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
10-09-2024 07:55
Static task
static1
Behavioral task
behavioral1
Sample
New Compressed (zipped) Folder.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
New Compressed (zipped) Folder.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Crack/CursorFX.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Crack/CursorFX.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Crack/CursorFXConfig.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Crack/CursorFXConfig.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Crack/Read_Me.txt
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Crack/Read_Me.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Stardock CursorFX v4.03 Setup.exe
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Stardock CursorFX v4.03 Setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
winrar-x64-701.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
winrar-x64-701.exe
Resource
win10v2004-20240802-en
General
-
Target
Stardock CursorFX 4.03 Multilingual [PeskTop.com]/Stardock CursorFX v4.03/Crack/CursorFXConfig.exe
-
Size
1.1MB
-
MD5
19d0fdd23c79c9a12f3627207486bbe2
-
SHA1
8348adc5c78246eac71d2dec0f77d7c8e6c243a9
-
SHA256
3fc33763ad6d833590271d205f54f03fa35455a55956525f8da6377cec84b122
-
SHA512
4629e7a292ec25fa2b21df97d17fc4ded2c59395b9d75a9ee0ddc150f6a6d7c0fa89459083d6c53438b1558b0c7a41bc3a11ca64ccd4a1ef7dd811d1edf7a469
-
SSDEEP
24576:g7v2AIgRD+rT/y6rsQ4KJRveCE0m/vlgVIRWC1+zU:q2ALYyaDjve3dVg+ERU
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CursorFXConfig.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Stardock CursorFX 4.03 Multilingual [PeskTop.com]\Stardock CursorFX v4.03\Crack\CursorFXConfig.exe"C:\Users\Admin\AppData\Local\Temp\Stardock CursorFX 4.03 Multilingual [PeskTop.com]\Stardock CursorFX v4.03\Crack\CursorFXConfig.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4948