Overview
overview
6Static
static
3El Chips A...ht.zip
windows10-1703-x64
El Chips A...th.pak
windows10-1703-x64
3El Chips A...tr.pak
windows10-1703-x64
3El Chips A...uk.pak
windows10-1703-x64
3El Chips A...ur.pak
windows10-1703-x64
3El Chips A...vi.pak
windows10-1703-x64
3El Chips A...CN.pak
windows10-1703-x64
3El Chips A...TW.pak
windows10-1703-x64
3El Chips A...es.pak
windows10-1703-x64
3El Chips A...a0.svg
windows10-1703-x64
3El Chips A...84.svg
windows10-1703-x64
3El Chips A...ed.svg
windows10-1703-x64
3El Chips A...3f.wav
windows10-1703-x64
1El Chips A...44.svg
windows10-1703-x64
3El Chips A...0e.svg
windows10-1703-x64
3El Chips A...25.svg
windows10-1703-x64
3El Chips A...85.png
windows10-1703-x64
3El Chips A...18.wav
windows10-1703-x64
6El Chips A...df.wav
windows10-1703-x64
1El Chips A...8d.svg
windows10-1703-x64
3El Chips A...a9.png
windows10-1703-x64
3El Chips A...t.json
windows10-1703-x64
3El Chips A...ain.js
windows10-1703-x64
3El Chips A...on.png
windows10-1703-x64
3El Chips A...x.html
windows10-1703-x64
4El Chips A...e.json
windows10-1703-x64
3El Chips A...ipt.js
windows10-1703-x64
3El Chips A...ob.bin
windows10-1703-x64
3El Chips A...ot.bin
windows10-1703-x64
3El Chips A...er.dll
windows10-1703-x64
3El Chips A...d.json
windows10-1703-x64
3El Chips A...-1.dll
windows10-1703-x64
3Analysis
-
max time kernel
387s -
max time network
1607s -
platform
windows10-1703_x64 -
resource
win10-20240611-en -
resource tags
arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system -
submitted
01-10-2024 20:01
Static task
static1
Behavioral task
behavioral1
Sample
El Chips Ad Custom Night.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
El Chips Ad Custom Night/locales/th.pak
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
El Chips Ad Custom Night/locales/tr.pak
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
El Chips Ad Custom Night/locales/uk.pak
Resource
win10-20240611-en
Behavioral task
behavioral5
Sample
El Chips Ad Custom Night/locales/ur.pak
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
El Chips Ad Custom Night/locales/vi.pak
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
El Chips Ad Custom Night/locales/zh-CN.pak
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
El Chips Ad Custom Night/locales/zh-TW.pak
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
El Chips Ad Custom Night/resources.pak
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
El Chips Ad Custom Night/resources/app/assets/0a52bc28f06569c489043a27c1e0dba0.svg
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
El Chips Ad Custom Night/resources/app/assets/228ea95da153e2739265b8d7ff154084.svg
Resource
win10-20240611-en
Behavioral task
behavioral12
Sample
El Chips Ad Custom Night/resources/app/assets/3339a2953a3bf62bb80e54ff575dbced.svg
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
El Chips Ad Custom Night/resources/app/assets/373adfc30b0253bff90c494b9606173f.wav
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
El Chips Ad Custom Night/resources/app/assets/7a9a594b3ed9f560fa855f10cdc4cf44.svg
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
El Chips Ad Custom Night/resources/app/assets/7ebc43c79f1bcdd30d6754865669bf0e.svg
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
El Chips Ad Custom Night/resources/app/assets/8aff245bf658480a1f25c74db9a9be25.svg
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
El Chips Ad Custom Night/resources/app/assets/a596f06dd48878823f16d450b1f91585.png
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
El Chips Ad Custom Night/resources/app/assets/acd9351c7c86a9dc483b5235835e6e18.wav
Resource
win10-20240611-en
Behavioral task
behavioral19
Sample
El Chips Ad Custom Night/resources/app/assets/bb6039e2d2b80f0ebed05ce75a7578df.wav
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
El Chips Ad Custom Night/resources/app/assets/ccde3b77178fc091b888b485ab9d1a8d.svg
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
El Chips Ad Custom Night/resources/app/assets/e917bbe2ea2a7cd894b74de8a9dbd1a9.png
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
El Chips Ad Custom Night/resources/app/assets/project.json
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
El Chips Ad Custom Night/resources/app/electron-main.js
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
El Chips Ad Custom Night/resources/app/icon.png
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
El Chips Ad Custom Night/resources/app/index.html
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
El Chips Ad Custom Night/resources/app/package.json
Resource
win10-20240611-en
Behavioral task
behavioral27
Sample
El Chips Ad Custom Night/resources/app/script.js
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
El Chips Ad Custom Night/snapshot_blob.bin
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
El Chips Ad Custom Night/v8_context_snapshot.bin
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
El Chips Ad Custom Night/vk_swiftshader.dll
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
El Chips Ad Custom Night/vk_swiftshader_icd.json
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
El Chips Ad Custom Night/vulkan-1.dll
Resource
win10-20240404-en
General
-
Target
El Chips Ad Custom Night/resources/app/package.json
-
Size
98B
-
MD5
7d96cbeaaf83d99c8b7a31e9a078d464
-
SHA1
d622a85ef55e01672a35a4921b6517c1e0d2ba53
-
SHA256
86fcbc98da1712bd36c9420823c3a150e6dbfa812005ee4e4f1c8aa9ed66cb30
-
SHA512
6e92f8797c2fc8d40c16669a632db2b3a2a886cd5fb06f67425751740a032f1782729a633552cb424e90029d5cca7ddb7eff0a7c864aec8052ee51f3a42e76f4
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1508 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\El Chips Ad Custom Night\resources\app\package.json"1⤵
- Modifies registry class
PID:3648
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1508