Overview
overview
7Static
static
5ae28322e08...eN.exe
windows7-x64
7ae28322e08...eN.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3DomaIQ.exe
windows7-x64
3DomaIQ.exe
windows10-2004-x64
1DomaIQ10.exe
windows7-x64
3DomaIQ10.exe
windows10-2004-x64
1config.dll
windows7-x64
1config.dll
windows10-2004-x64
1routes.dll
windows7-x64
1routes.dll
windows10-2004-x64
1setup__120.exe
windows7-x64
5setup__120.exe
windows10-2004-x64
5Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
12/10/2024, 18:05
Behavioral task
behavioral1
Sample
ae28322e0824f19bdab5fd824142a22ea5f4a27d8f695a2ce0bf6b642b55f84eN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ae28322e0824f19bdab5fd824142a22ea5f4a27d8f695a2ce0bf6b642b55f84eN.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
DomaIQ.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
DomaIQ.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
DomaIQ10.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
DomaIQ10.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
config.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
config.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
routes.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
routes.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
setup__120.exe
Resource
win7-20240903-en
General
-
Target
DomaIQ10.exe
-
Size
210KB
-
MD5
182c1a6ddf2cb503409f040e06756903
-
SHA1
8c961dcef71aef8ef9c66fc8fd008ce09aec38bc
-
SHA256
b354a74ea0647db730d0b4a25bb9e9db224c7b72c6cef281c147a3c274362039
-
SHA512
ef3070233f5c578d7b0bbcf3566e046cdf24ffe792bf1428fc6d800e2fd0057cce9c74213500cfeca55016634275dbc32fec754b8abc527a63133978bc003a01
-
SSDEEP
6144:PADXRyd70TFUTNWAHW6eqIyKJVbqNTT6c43w:aMKjLw
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3068 DomaIQ10.exe 3068 DomaIQ10.exe