81e45c1e6d6a718624159e116e6daa8c1547f39bef7f56163303e7eca8abfae1 | Triage

Submit
Reports

Overview

overview

Static

static

setup.exe

windows7-x64

setup.exe

windows10-2004-x64

$PLUGINSDI...gm.ogg

windows7-x64

1

$PLUGINSDI...gm.ogg

windows10-2004-x64

7

$PLUGINSDI...in.skf

windows7-x64

3

$PLUGINSDI...in.skf

windows10-2004-x64

3

$PLUGINSDI...al.ini

windows7-x64

1

$PLUGINSDI...al.ini

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows7-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

$PLUGINSDI...sh.bmp

windows7-x64

3

$PLUGINSDI...sh.bmp

windows10-2004-x64

7

Resource/1.bmp

windows7-x64

3

Resource/1.bmp

windows10-2004-x64

7

Resource/10.bmp

windows7-x64

3

Resource/10.bmp

windows10-2004-x64

7

Resource/11.bmp

windows7-x64

3

Resource/11.bmp

windows10-2004-x64

7

Resource/12.bmp

windows7-x64

3

Resource/12.bmp

windows10-2004-x64

7

Resource/13.bmp

windows7-x64

3

Resource/13.bmp

windows10-2004-x64

7

Resource/14.bmp

windows7-x64

3

Resource/14.bmp

windows10-2004-x64

7

Resource/15.bmp

windows7-x64

3

Resource/15.bmp

windows10-2004-x64

7

Resource/16.bmp

windows7-x64

3

Resource/16.bmp

windows10-2004-x64

7

Resource/2.bmp

windows7-x64

3

Resource/2.bmp

windows10-2004-x64

7

Resource/3.bmp

windows7-x64

3

Resource/3.bmp

windows10-2004-x64

7

Analysis

max time kernel
90s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
28-09-2024 21:25

Sharing

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

setup.exe

Resource

win7-20240708-en

strela discovery stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

setup.exe

Resource

win10v2004-20240802-en

strela discovery stealer

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/dat_bgm.ogg

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/dat_bgm.ogg

Resource

win10v2004-20240802-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/dat_skin.skf

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/dat_skin.skf

Resource

win10v2004-20240910-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/ioSpecial.ini

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/ioSpecial.ini

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/splash.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/splash.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral13

Sample

Resource/1.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

Resource/1.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral15

Sample

Resource/10.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

Resource/10.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral17

Sample

Resource/11.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

Resource/11.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

Resource/12.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

Resource/12.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral21

Sample

Resource/13.bmp

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

Resource/13.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral23

Sample

Resource/14.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

Resource/14.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral25

Sample

Resource/15.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

Resource/15.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral27

Sample

Resource/16.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Resource/16.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral29

Sample

Resource/2.bmp

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

Resource/2.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral31

Sample

Resource/3.bmp

Resource

win7-20240704-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Resource/3.bmp

Resource

win10v2004-20240802-en

windows10-2004-x64

7 signatures

150 seconds

Report Analysis Logs

General

Target

$PLUGINSDIR/ioSpecial.ini
Size

211B
MD5

e2d5070bc28db1ac745613689ff86067
SHA1

282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA256

d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
SHA512

a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\ioSpecial.ini
1⤵
PID:844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy