Overview
overview
6Static
static
1avgadvisorx.dll
windows7-x64
3avgadvisorx.dll
windows10-2004-x64
3avgapix.dll
windows7-x64
3avgapix.dll
windows10-2004-x64
3avgceix.dll
windows7-x64
3avgceix.dll
windows10-2004-x64
3avgcfgex.exe
windows7-x64
3avgcfgex.exe
windows10-2004-x64
3avgcfgx.dll
windows7-x64
3avgcfgx.dll
windows10-2004-x64
3avgcmgr.exe
windows7-x64
3avgcmgr.exe
windows10-2004-x64
3avgcommx.dll
windows7-x64
3avgcommx.dll
windows10-2004-x64
3avgcslx.dll
windows7-x64
3avgcslx.dll
windows10-2004-x64
3avgdecider.dll
windows7-x64
3avgdecider.dll
windows10-2004-x64
3avgdiagex.exe
windows7-x64
6avgdiagex.exe
windows10-2004-x64
6avgduix.dll
windows7-x64
3avgduix.dll
windows10-2004-x64
3avgdumpx.exe
windows7-x64
1avgdumpx.exe
windows10-2004-x64
3avgidsha.dll
windows7-x64
1avgidsha.dll
windows10-2004-x64
1avgidshx.dll
windows7-x64
3avgidshx.dll
windows10-2004-x64
3avgkrnlapix.dll
windows7-x64
3avgkrnlapix.dll
windows10-2004-x64
3avglngx.dll
windows7-x64
3avglngx.dll
windows10-2004-x64
3Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
15-09-2024 05:51
Static task
static1
Behavioral task
behavioral1
Sample
avgadvisorx.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
avgadvisorx.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
avgapix.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
avgapix.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
avgceix.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
avgceix.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
avgcfgex.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
avgcfgex.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
avgcfgx.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
avgcfgx.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
avgcmgr.exe
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
avgcmgr.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
avgcommx.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
avgcommx.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
avgcslx.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
avgcslx.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
avgdecider.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
avgdecider.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
avgdiagex.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
avgdiagex.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
avgduix.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
avgduix.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral23
Sample
avgdumpx.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
avgdumpx.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
avgidsha.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
avgidsha.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
avgidshx.dll
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
avgidshx.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
avgkrnlapix.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
avgkrnlapix.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
avglngx.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
avglngx.dll
Resource
win10v2004-20240802-en
General
-
Target
avgapix.dll
-
Size
59KB
-
MD5
d491c8e2fd102d4e38089d24930c6e08
-
SHA1
ad4872fc5f90df0028c040f9185eaf21637cb975
-
SHA256
64ab5ec3d25173d1592b491f1dc7f79cb6ef220dc86513d1aa18fc95b52791f4
-
SHA512
c98517d7d02871d3ee2d0fdfc5025b2c8b7cf493429d776e5fb20d3a60cd07924c1c300de6e2975f9658ce44811e4a4a436d12699d22e7306ad6ce71aec49fd9
-
SSDEEP
1536:Gt8iwM7yo38ba2wvSWWVxthDLqAHshHrwBJiOCbG:Ej7wba2wOVxthDLqAsLw3iOCbG
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
rundll32.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 4692 wrote to memory of 940 4692 rundll32.exe rundll32.exe PID 4692 wrote to memory of 940 4692 rundll32.exe rundll32.exe PID 4692 wrote to memory of 940 4692 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\avgapix.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\avgapix.dll,#12⤵
- System Location Discovery: System Language Discovery