Overview
overview
9Static
static
9Прове...sk.exe
windows7-x64
5Прове...sk.exe
windows10-2004-x64
5Прове...ng.exe
windows7-x64
6Прове...ng.exe
windows10-2004-x64
6Прове...ll.exe
windows7-x64
7Прове...ll.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Прове...er.bat
windows7-x64
3Прове...er.bat
windows10-2004-x64
3Прове...er.lnk
windows7-x64
3Прове...er.lnk
windows10-2004-x64
3Прове...в.exe
windows7-x64
6Прове...в.exe
windows10-2004-x64
6Прове...ta.bat
windows7-x64
3Прове...ta.bat
windows10-2004-x64
3Прове...е.exe
windows7-x64
9Прове...е.exe
windows10-2004-x64
9Прове...и.exe
windows7-x64
3Прове...и.exe
windows10-2004-x64
3Прове...� .exe
windows7-x64
4Прове...� .exe
windows10-2004-x64
4Прове...и.exe
windows7-x64
3Прове...и.exe
windows10-2004-x64
3Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
12-09-2024 22:04
Behavioral task
behavioral1
Sample
ПроверОчка/AnyDesk.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ПроверОчка/AnyDesk.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
ПроверОчка/Everything/Everything.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
ПроверОчка/Everything/Everything.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
ПроверОчка/Everything/Uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
ПроверОчка/Everything/Uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
ПроверОчка/SunProject-checker.bat
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
ПроверОчка/SunProject-checker.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
ПроверОчка/System Informer.lnk
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
ПроверОчка/System Informer.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
ПроверОчка/История устройств.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
ПроверОчка/История устройств.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
ПроверОчка/Открыть appdata.bat
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
ПроверОчка/Открыть appdata.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
ПроверОчка/Последние запущенные.exe
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
ПроверОчка/Последние запущенные.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
ПроверОчка/Последние папки.exe
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
ПроверОчка/Последние папки.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
ПроверОчка/Последняя активность .exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
ПроверОчка/Последняя активность .exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
ПроверОчка/Удаленные папки.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
ПроверОчка/Удаленные папки.exe
Resource
win10v2004-20240802-en
General
-
Target
ПроверОчка/Удаленные папки.exe
-
Size
1.6MB
-
MD5
faaff4148db8cda4068234f5d5110c60
-
SHA1
b744ae0ee7f3cfeb762a4c9ea4b72f1f092fe391
-
SHA256
58304b1ed9a66d44938f1e04767d1219194693bc918750388f259b1d0d251dc1
-
SHA512
1956bad6e775b08fab06358225b5cb027ec3bcf35fa304c7e9dbcfcefe55b887a0dc95db24d6655eb299d6abb6740d64f36912683549c951d73836e4e63a18f0
-
SSDEEP
24576:0I0a0W7eWRWhccdtwc2DXeYU2qNEV9g7er:0IGE2ccnmhqa
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Удаленные папки.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2332 Удаленные папки.exe