Analysis
-
max time kernel
417s -
max time network
1137s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
14/09/2024, 10:04
Static task
static1
Behavioral task
behavioral1
Sample
X48 Loader/backends/vulkan/generate_spv.sh
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
X48 Loader/backends/vulkan/generate_spv.sh
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
X48 Loader/examples/example_win32_directx11/Build/Browser Opera GX.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
X48 Loader/examples/example_win32_directx11/Build/Browser Opera GX.exe
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
X48 Loader/examples/example_win32_directx11/Release/vxlang/vxlang.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
X48 Loader/examples/example_win32_directx11/Release/vxlang/vxlang.exe
Resource
win11-20240802-en
General
-
Target
X48 Loader/examples/example_win32_directx11/Release/vxlang/vxlang.exe
-
Size
4.8MB
-
MD5
88ed3d139eb7ae96ec10b3a06c3be6ea
-
SHA1
c6de0474d982f6d12670f9cbc71f05420d023e9a
-
SHA256
b8481fa65ca9bc716357a1fa0e23a930277d2e070b7b8aa1cd6d2e771ea467f5
-
SHA512
0d69d07deb6fd0770fe5e718940a88609635fe31594c127e75d51a942061cfc2c3defb325b34c4f01aa150764694cdf2671967759402f9e49fd56fbee52716ec
-
SSDEEP
98304:a72PUKPzu3MEVmpMMg9gmL+2Pp86gkLTDUU:jPUjMtEgmLM6gkvD3
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
pid Process 2300 vxlang.exe 2300 vxlang.exe 2300 vxlang.exe 2300 vxlang.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2300 vxlang.exe 2300 vxlang.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\X48 Loader\examples\example_win32_directx11\Release\vxlang\vxlang.exe"C:\Users\Admin\AppData\Local\Temp\X48 Loader\examples\example_win32_directx11\Release\vxlang\vxlang.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2300