Overview
overview
7Static
static
5iz3lne.zip
windows7-x64
1iz3lne.zip
windows10-2004-x64
1GenP-3.4.14.1.exe
windows7-x64
7GenP-3.4.14.1.exe
windows10-2004-x64
7SOURCE/COMPILE.txt
windows7-x64
1SOURCE/COMPILE.txt
windows10-2004-x64
1SOURCE/Gen....1.ps1
windows7-x64
3SOURCE/Gen....1.ps1
windows10-2004-x64
3SOURCE/ICONS/Logo.ico
windows7-x64
3SOURCE/ICONS/Logo.ico
windows10-2004-x64
3SOURCE/NSudoLG.exe
windows7-x64
1SOURCE/NSudoLG.exe
windows10-2004-x64
1SOURCE/README.txt
windows7-x64
1SOURCE/README.txt
windows10-2004-x64
1SOURCE/config.ini
windows7-x64
1SOURCE/config.ini
windows10-2004-x64
1Resubmissions
19-09-2024 06:30
240919-g9r3psvepe 719-09-2024 06:27
240919-g7tthsvdrg 519-09-2024 06:21
240919-g4a71avcma 719-09-2024 06:17
240919-g127bavejl 7Analysis
-
max time kernel
116s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2024 06:17
Static task
static1
Behavioral task
behavioral1
Sample
iz3lne.zip
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
iz3lne.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
GenP-3.4.14.1.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
GenP-3.4.14.1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
SOURCE/COMPILE.txt
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
SOURCE/COMPILE.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
SOURCE/GenP-3.4.14.1.ps1
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
SOURCE/GenP-3.4.14.1.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
SOURCE/ICONS/Logo.ico
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
SOURCE/ICONS/Logo.ico
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
SOURCE/NSudoLG.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
SOURCE/NSudoLG.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
SOURCE/README.txt
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
SOURCE/README.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
SOURCE/config.ini
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
SOURCE/config.ini
Resource
win10v2004-20240802-en
General
-
Target
SOURCE/ICONS/Logo.ico
-
Size
156KB
-
MD5
c383035a57c2e7a39803f71096011ca6
-
SHA1
28eb06af5b03de330423e40275cfc251ee324d6f
-
SHA256
71de01801146e8dbe1ea5771a80b5f8e39693a58ad12987022dde335b9d7ca86
-
SHA512
62f3243857cd4a03f094209da3990c2bbe4f92ae2a4d945f2715cc0d95daf0bc6b821bc0a1e06ddcd86cbf409d9ef2f530116b1e155d2e2f98a5d855342e4796
-
SSDEEP
3072:bXKRZnDsdyWfB4uZfJybGkbr81fCMGfKCnQY/LWEwIqoqE7U4ubpLEO6uim:bXSZnx8muZ04FPEO9VkHy
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\SOURCE\ICONS\Logo.ico1⤵PID:3940
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1708