Overview
overview
7Static
static
3d49877b56e...78.exe
windows7-x64
7d49877b56e...78.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$TEMP/dxwebsetup.exe
windows7-x64
7$TEMP/dxwebsetup.exe
windows10-2004-x64
77za.exe
windows7-x64
37za.exe
windows10-2004-x64
3ClassLibrary1.dll
windows7-x64
3ClassLibrary1.dll
windows10-2004-x64
3nbswave/__init__.pyc
windows7-x64
3nbswave/__init__.pyc
windows10-2004-x64
3nbswave/audio.pyc
windows7-x64
3nbswave/audio.pyc
windows10-2004-x64
3nbswave/main.pyc
windows7-x64
3nbswave/main.pyc
windows10-2004-x64
3nbswave/nbs.pyc
windows7-x64
3nbswave/nbs.pyc
windows10-2004-x64
3pydub/__init__.pyc
windows7-x64
3pydub/__init__.pyc
windows10-2004-x64
3pydub/audi...nt.pyc
windows7-x64
3pydub/audi...nt.pyc
windows10-2004-x64
3pydub/effects.pyc
windows7-x64
3pydub/effects.pyc
windows10-2004-x64
3pydub/exceptions.pyc
windows7-x64
3pydub/exceptions.pyc
windows10-2004-x64
3pydub/generators.pyc
windows7-x64
3pydub/generators.pyc
windows10-2004-x64
3pydub/logg...ls.pyc
windows7-x64
3pydub/logg...ls.pyc
windows10-2004-x64
3Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2024, 02:25
Static task
static1
Behavioral task
behavioral1
Sample
d49877b56eae195a92a251b8a2323f9271c5d1258c8671d26e03ee44425c0478.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d49877b56eae195a92a251b8a2323f9271c5d1258c8671d26e03ee44425c0478.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$TEMP/dxwebsetup.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$TEMP/dxwebsetup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
7za.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
7za.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
ClassLibrary1.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
ClassLibrary1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
nbswave/__init__.pyc
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
nbswave/__init__.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
nbswave/audio.pyc
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
nbswave/audio.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
nbswave/main.pyc
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
nbswave/main.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
nbswave/nbs.pyc
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
nbswave/nbs.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
pydub/__init__.pyc
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
pydub/__init__.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
pydub/audio_segment.pyc
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
pydub/audio_segment.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
pydub/effects.pyc
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
pydub/effects.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
pydub/exceptions.pyc
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
pydub/exceptions.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
pydub/generators.pyc
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
pydub/generators.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
pydub/logging_utils.pyc
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
pydub/logging_utils.pyc
Resource
win10v2004-20241007-en
General
-
Target
pydub/__init__.pyc
-
Size
182B
-
MD5
24a342e1e9bee423259b9d5bfb928e40
-
SHA1
51593bbec99baae53b877a455998d2c938126fe1
-
SHA256
d622f85f16e66bbdc26e9c72b6ce3d9461c3d7ca771c83335e3663557bde3c8c
-
SHA512
50ac0000bdd32233bc7bf70dc749d998667aaf6c7f5db5f91705be7b28b1f960c75b18cfd2d0fb6057b48e30d9e252771656d58f8b81458b90a4cc3a227474b7
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 224 OpenWith.exe