Overview
overview
6Static
static
6Beholder_ ...re.zip
windows7-x64
1Beholder_ ...re.zip
windows10-2004-x64
1Android/ob...ee.zip
windows7-x64
1Android/ob...ee.zip
windows10-2004-x64
1assets/Logo/logo1.mp4
windows7-x64
1assets/Logo/logo1.mp4
windows10-2004-x64
6assets/Logo/logo2.mp4
windows7-x64
1assets/Logo/logo2.mp4
windows10-2004-x64
6assets/Uni...n.json
windows7-x64
3assets/Uni...n.json
windows10-2004-x64
3assets/bin...000000
windows7-x64
1assets/bin...000000
windows10-2004-x64
1assets/bin...6cd535
windows7-x64
1assets/bin...6cd535
windows10-2004-x64
1assets/bin...23b72b
windows7-x64
1assets/bin...23b72b
windows10-2004-x64
1assets/bin...247a10
windows7-x64
1assets/bin...247a10
windows10-2004-x64
1assets/bin...45cca7
windows7-x64
1assets/bin...45cca7
windows10-2004-x64
1assets/bin...65105d
windows7-x64
1assets/bin...65105d
windows10-2004-x64
1assets/bin...6d79f6
windows7-x64
1assets/bin...6d79f6
windows10-2004-x64
1assets/bin...9897ac
windows7-x64
1assets/bin...9897ac
windows10-2004-x64
1assets/bin...7bf85e
windows7-x64
1assets/bin...7bf85e
windows10-2004-x64
1assets/bin...29fc78
windows7-x64
1assets/bin...29fc78
windows10-2004-x64
1assets/bin...04a31f
windows7-x64
1assets/bin...04a31f
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14-09-2024 02:16
Static task
static1
Behavioral task
behavioral1
Sample
Beholder_ Adventure_2.6.260_APKPure.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Beholder_ Adventure_2.6.260_APKPure.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Android/obb/com.creativemobile.beholderfree/main.260.com.creativemobile.beholderfree.zip
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Android/obb/com.creativemobile.beholderfree/main.260.com.creativemobile.beholderfree.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
assets/Logo/logo1.mp4
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
assets/Logo/logo1.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
assets/Logo/logo2.mp4
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
assets/Logo/logo2.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
assets/UnityServicesProjectConfiguration.json
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
assets/UnityServicesProjectConfiguration.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
assets/bin/Data/0000000000000000f000000000000000
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
assets/bin/Data/0000000000000000f000000000000000
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
assets/bin/Data/000f5b1515d06f1449968c77136cd535
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
assets/bin/Data/000f5b1515d06f1449968c77136cd535
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
assets/bin/Data/001a40d38db2e2e45af7fe681123b72b
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
assets/bin/Data/001a40d38db2e2e45af7fe681123b72b
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
assets/bin/Data/002130a1018259c40b40ef305d247a10
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
assets/bin/Data/002130a1018259c40b40ef305d247a10
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
assets/bin/Data/003041528ced7e9489f9c9d8dc45cca7
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
assets/bin/Data/003041528ced7e9489f9c9d8dc45cca7
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
assets/bin/Data/005e69c442679cd43814f2cd5c65105d
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
assets/bin/Data/005e69c442679cd43814f2cd5c65105d
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
assets/bin/Data/00691a9df77177b43a7767a4826d79f6
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
assets/bin/Data/00691a9df77177b43a7767a4826d79f6
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
assets/bin/Data/0078594822131ad49b77961bac9897ac
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
assets/bin/Data/0078594822131ad49b77961bac9897ac
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
assets/bin/Data/0080368375c37164e9e7f29b7b7bf85e
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
assets/bin/Data/0080368375c37164e9e7f29b7b7bf85e
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
assets/bin/Data/00c6d7022de18f046a9dfc212129fc78
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
assets/bin/Data/00c6d7022de18f046a9dfc212129fc78
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
assets/bin/Data/00f43663d5dcfd7438bc2ec14904a31f
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
assets/bin/Data/00f43663d5dcfd7438bc2ec14904a31f
Resource
win10v2004-20240802-en
General
-
Target
assets/Logo/logo1.mp4
-
Size
1.3MB
-
MD5
7dade903ec1d5adf3599b99fd419ddbc
-
SHA1
790aebf6ef1ba0b0b72fb4256e88ec4de771d9cc
-
SHA256
8ee42d18a101f3fa6b189f528009dea40ce3440477154015f0d75aeb82f02aa0
-
SHA512
0f4294139eb32b26c44548451a9330ff54ab138cd12119533db7f618b42d03a22e1964e6f5ad1d18ff560319baa67ee1622691c0426606240a77d2df971de65a
-
SSDEEP
24576:za0BU5sqc6ZTtDu6HvFFoUZB01a37IAwDIaZte34G0ulgORGL0Z9UDNUA5ueX:zLmhd7HPFFoYZ37IAwDmomxGoZ9qOA55
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3020 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3020 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 3020 vlc.exe Token: SeIncBasePriorityPrivilege 3020 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe -
Suspicious use of SendNotifyMessage 9 IoCs
pid Process 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe 3020 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3020 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\assets\Logo\logo1.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3020