Overview
overview
5Static
static
3BDCAMSETUP...85.exe
windows10-2004-x64
5$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$SYSDIR/D3...47.dll
windows10-2004-x64
3$SYSDIR/vcomp140.dll
windows10-2004-x64
3$TEMP/BDMP...UP.exe
windows10-2004-x64
5$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$SYSDIR/bdmjpeg.dll
windows10-2004-x64
3$SYSDIR/bdmjpeg64.dll
windows10-2004-x64
1$SYSDIR/bdmpega.dll
windows10-2004-x64
3$SYSDIR/bdmpega64.dll
windows10-2004-x64
1$SYSDIR/bdmpegv.dll
windows10-2004-x64
3RegVulkanLayer.bat
windows10-2004-x64
3UnregVulkanLayer.bat
windows10-2004-x64
3amf-compon...32.dll
windows10-2004-x64
3amf-compon...64.dll
windows10-2004-x64
1amf-core-w...32.dll
windows10-2004-x64
3amf-core-w...64.dll
windows10-2004-x64
1bdcam.dll
windows10-2004-x64
3bdcam.exe
windows10-2004-x64
5bdcam64.exe
windows10-2004-x64
1bdcam64.dll
windows10-2004-x64
1bdcam_nonadmin.exe
windows10-2004-x64
5bdcamih.dll
windows10-2004-x64
3bdcamvk32.dll
windows10-2004-x64
3bdcamvk64.dll
windows10-2004-x64
1bdcap32.dll
windows10-2004-x64
3bdcap64.dll
windows10-2004-x64
1bdfix.exe
windows10-2004-x64
5lang/Japanese.ps1
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-10-2024 11:52
Static task
static1
Behavioral task
behavioral1
Sample
BDCAMSETUP_ENG_4_1_2_1385.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
$SYSDIR/D3DCompiler_47.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$SYSDIR/vcomp140.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
$TEMP/BDMPEG1SETUP.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
$SYSDIR/bdmjpeg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$SYSDIR/bdmjpeg64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
$SYSDIR/bdmpega.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
$SYSDIR/bdmpega64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
$SYSDIR/bdmpegv.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
RegVulkanLayer.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
UnregVulkanLayer.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
amf-component-vce-windesktop32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
amf-component-vce-windesktop64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
amf-core-windesktop32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
amf-core-windesktop64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
bdcam.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
bdcam.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
bdcam64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
bdcam64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
bdcam_nonadmin.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
bdcamih.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
bdcamvk32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
bdcamvk64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
bdcap32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
bdcap64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
bdfix.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
lang/Japanese.ps1
Resource
win10v2004-20241007-en
General
-
Target
bdcam64.exe
-
Size
2.9MB
-
MD5
59ce17c72b23238b6c7a8bdc93dc3fce
-
SHA1
54fb55b07f2fb1b1acae2befcac2c8d8b17e73ad
-
SHA256
a213faac438ddbf330c3f81d6fb7ad5af81578011045fb60b7f66773f51092fb
-
SHA512
9ec761ecf2617483bf258c47dca046ca2a1cbb1e92f1ac11038136fea1dcb77bc93b68a82b2a5957e97ab8a979e95dfd3483f3c246ba517016605f6daaf48cd9
-
SSDEEP
49152:MXSTAAeZLXoVh8zWenEIkecOHl/ZKV9kD5YT+xfQ/hNlaziwOwh8C0NpNJDD:0STe0QWmXqVvhTc8C0Nl
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2224 bdcam64.exe 2224 bdcam64.exe -
Suspicious use of SetWindowsHookEx 9 IoCs
pid Process 2224 bdcam64.exe 2224 bdcam64.exe 2224 bdcam64.exe 2224 bdcam64.exe 2224 bdcam64.exe 2224 bdcam64.exe 2224 bdcam64.exe 2224 bdcam64.exe 2224 bdcam64.exe