Overview
overview
6Static
static
3El Chips A...ht.zip
windows10-1703-x64
El Chips A...th.pak
windows10-1703-x64
3El Chips A...tr.pak
windows10-1703-x64
3El Chips A...uk.pak
windows10-1703-x64
3El Chips A...ur.pak
windows10-1703-x64
3El Chips A...vi.pak
windows10-1703-x64
3El Chips A...CN.pak
windows10-1703-x64
3El Chips A...TW.pak
windows10-1703-x64
3El Chips A...es.pak
windows10-1703-x64
3El Chips A...a0.svg
windows10-1703-x64
3El Chips A...84.svg
windows10-1703-x64
3El Chips A...ed.svg
windows10-1703-x64
3El Chips A...3f.wav
windows10-1703-x64
1El Chips A...44.svg
windows10-1703-x64
3El Chips A...0e.svg
windows10-1703-x64
3El Chips A...25.svg
windows10-1703-x64
3El Chips A...85.png
windows10-1703-x64
3El Chips A...18.wav
windows10-1703-x64
6El Chips A...df.wav
windows10-1703-x64
1El Chips A...8d.svg
windows10-1703-x64
3El Chips A...a9.png
windows10-1703-x64
3El Chips A...t.json
windows10-1703-x64
3El Chips A...ain.js
windows10-1703-x64
3El Chips A...on.png
windows10-1703-x64
3El Chips A...x.html
windows10-1703-x64
4El Chips A...e.json
windows10-1703-x64
3El Chips A...ipt.js
windows10-1703-x64
3El Chips A...ob.bin
windows10-1703-x64
3El Chips A...ot.bin
windows10-1703-x64
3El Chips A...er.dll
windows10-1703-x64
3El Chips A...d.json
windows10-1703-x64
3El Chips A...-1.dll
windows10-1703-x64
3Analysis
-
max time kernel
305s -
max time network
1587s -
platform
windows10-1703_x64 -
resource
win10-20240611-en -
resource tags
arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system -
submitted
01-10-2024 20:01
Static task
static1
Behavioral task
behavioral1
Sample
El Chips Ad Custom Night.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
El Chips Ad Custom Night/locales/th.pak
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
El Chips Ad Custom Night/locales/tr.pak
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
El Chips Ad Custom Night/locales/uk.pak
Resource
win10-20240611-en
Behavioral task
behavioral5
Sample
El Chips Ad Custom Night/locales/ur.pak
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
El Chips Ad Custom Night/locales/vi.pak
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
El Chips Ad Custom Night/locales/zh-CN.pak
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
El Chips Ad Custom Night/locales/zh-TW.pak
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
El Chips Ad Custom Night/resources.pak
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
El Chips Ad Custom Night/resources/app/assets/0a52bc28f06569c489043a27c1e0dba0.svg
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
El Chips Ad Custom Night/resources/app/assets/228ea95da153e2739265b8d7ff154084.svg
Resource
win10-20240611-en
Behavioral task
behavioral12
Sample
El Chips Ad Custom Night/resources/app/assets/3339a2953a3bf62bb80e54ff575dbced.svg
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
El Chips Ad Custom Night/resources/app/assets/373adfc30b0253bff90c494b9606173f.wav
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
El Chips Ad Custom Night/resources/app/assets/7a9a594b3ed9f560fa855f10cdc4cf44.svg
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
El Chips Ad Custom Night/resources/app/assets/7ebc43c79f1bcdd30d6754865669bf0e.svg
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
El Chips Ad Custom Night/resources/app/assets/8aff245bf658480a1f25c74db9a9be25.svg
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
El Chips Ad Custom Night/resources/app/assets/a596f06dd48878823f16d450b1f91585.png
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
El Chips Ad Custom Night/resources/app/assets/acd9351c7c86a9dc483b5235835e6e18.wav
Resource
win10-20240611-en
Behavioral task
behavioral19
Sample
El Chips Ad Custom Night/resources/app/assets/bb6039e2d2b80f0ebed05ce75a7578df.wav
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
El Chips Ad Custom Night/resources/app/assets/ccde3b77178fc091b888b485ab9d1a8d.svg
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
El Chips Ad Custom Night/resources/app/assets/e917bbe2ea2a7cd894b74de8a9dbd1a9.png
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
El Chips Ad Custom Night/resources/app/assets/project.json
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
El Chips Ad Custom Night/resources/app/electron-main.js
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
El Chips Ad Custom Night/resources/app/icon.png
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
El Chips Ad Custom Night/resources/app/index.html
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
El Chips Ad Custom Night/resources/app/package.json
Resource
win10-20240611-en
Behavioral task
behavioral27
Sample
El Chips Ad Custom Night/resources/app/script.js
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
El Chips Ad Custom Night/snapshot_blob.bin
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
El Chips Ad Custom Night/v8_context_snapshot.bin
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
El Chips Ad Custom Night/vk_swiftshader.dll
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
El Chips Ad Custom Night/vk_swiftshader_icd.json
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
El Chips Ad Custom Night/vulkan-1.dll
Resource
win10-20240404-en
General
-
Target
El Chips Ad Custom Night/locales/uk.pak
-
Size
634KB
-
MD5
3b2a976a25dca963e91df3695c502d8c
-
SHA1
ce7ae51211f512c3723bb43ea0de9e6debb70597
-
SHA256
28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37
-
SHA512
ba41ee074239afdf8f194b4ccb33060fa9655e3ccdac6a16090959d3214f8db15396b3e038d7de26c478fdd003472f680d2b6ac9a92acaf6ebf8aa258747ecc6
-
SSDEEP
12288:9ho+Aqwniyv1mNLtN1nBxs5fB3IjltE07kLNiXEFqS/V2:9ho+kiC52Ei
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings cmd.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2904 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\El Chips Ad Custom Night\locales\uk.pak"1⤵
- Modifies registry class
PID:1576
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2904