Overview
overview
7Static
static
3d22ac0b35f...bN.exe
windows7-x64
7d22ac0b35f...bN.exe
windows10-2004-x64
7$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3Racket.exe
windows7-x64
3Racket.exe
windows10-2004-x64
3collects/c...te.ps1
windows7-x64
3collects/c...te.ps1
windows10-2004-x64
3collects/c...ed.ps1
windows7-x64
3collects/c...ed.ps1
windows10-2004-x64
3collects/f...ip.vbs
windows7-x64
1collects/f...ip.vbs
windows10-2004-x64
1collects/n...ng.ps1
windows7-x64
3collects/n...ng.ps1
windows10-2004-x64
3collects/p...ls.vbs
windows7-x64
1collects/p...ls.vbs
windows10-2004-x64
1collects/r...rs.ps1
windows7-x64
3collects/r...rs.ps1
windows10-2004-x64
3collects/r...ler.js
windows7-x64
3collects/r...ler.js
windows10-2004-x64
3collects/r...st.vbs
windows7-x64
1collects/r...st.vbs
windows10-2004-x64
1collects/r...uct.js
windows7-x64
3collects/r...uct.js
windows10-2004-x64
3collects/r...et.vbs
windows7-x64
1collects/r...et.vbs
windows10-2004-x64
1collects/r...il.ps1
windows7-x64
3collects/r...il.ps1
windows10-2004-x64
3Analysis
-
max time kernel
111s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2024 01:36
Static task
static1
Behavioral task
behavioral1
Sample
d22ac0b35f2ed10a9b7a60d69470ced46b56f035a0539f4d92cde07218c3c7cbN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d22ac0b35f2ed10a9b7a60d69470ced46b56f035a0539f4d92cde07218c3c7cbN.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Racket.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Racket.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
collects/compiler/distribute.ps1
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
collects/compiler/distribute.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
collects/compiler/embed.ps1
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
collects/compiler/embed.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
collects/file/gunzip.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
collects/file/gunzip.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
collects/net/url-string.ps1
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
collects/net/url-string.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
collects/pkg/private/addl-installs.vbs
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
collects/pkg/private/addl-installs.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
collects/racket/contract/private/helpers.ps1
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
collects/racket/contract/private/helpers.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
collects/racket/match/compiler.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
collects/racket/match/compiler.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
collects/racket/mutable-treelist.vbs
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
collects/racket/mutable-treelist.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
collects/racket/private/define-struct.js
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
collects/racket/private/define-struct.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
collects/racket/private/set.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
collects/racket/private/set.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
collects/racket/private/struct-util.ps1
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
collects/racket/private/struct-util.ps1
Resource
win10v2004-20240802-en
General
-
Target
Racket.exe
-
Size
127KB
-
MD5
7296fe45bafa3cf6935c91fcebfdd605
-
SHA1
7f5f276d4b3492f75eceb6cfd303f831b35ea283
-
SHA256
40ed77b2fa5a4c4392e05547124c6b46841a5087091057ee09c62be3743038f7
-
SHA512
bcabae89a1413be04d5abe1daf458af18ab24a8bdf7a710216edd2390c0ad9b1e907f2232fdd08c3466e553ef2689a363cde53c731a3300a921a07ff3f46b381
-
SSDEEP
1536:wpkYxRCGLiDKh4wjopWQ4Ot8Rm4xxkk4fZW/vgM8R3bCy8P7VKZVQ:wpkYxRCLD24w04Q/dfcYM0C/P7V6y
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Racket.exe