Overview
overview
7Static
static
7Sparta-V2.5.6.zip
windows7-x64
1Sparta-V2.5.6.zip
windows10-2004-x64
1Sparta-V2....Me.txt
windows7-x64
1Sparta-V2....Me.txt
windows10-2004-x64
1Sparta-V2.....6.exe
windows7-x64
1Sparta-V2.....6.exe
windows10-2004-x64
1Sparta-V2....64.dll
windows7-x64
1Sparta-V2....64.dll
windows10-2004-x64
1Sparta-V2....ng.jpg
windows7-x64
3Sparta-V2....ng.jpg
windows10-2004-x64
3Sparta-V2....s2.png
windows7-x64
3Sparta-V2....s2.png
windows10-2004-x64
3Sparta-V2....nu.png
windows7-x64
3Sparta-V2....nu.png
windows10-2004-x64
3Sparta-V2....UI.txt
windows7-x64
1Sparta-V2....UI.txt
windows10-2004-x64
1Sparta-V2....FK.txt
windows7-x64
1Sparta-V2....FK.txt
windows10-2004-x64
1Sparta-V2....IV.txt
windows7-x64
1Sparta-V2....IV.txt
windows10-2004-x64
1Sparta-V2....ure.js
windows7-x64
3Sparta-V2....ure.js
windows10-2004-x64
3Sparta-V2....rt.txt
windows7-x64
1Sparta-V2....rt.txt
windows10-2004-x64
1Sparta-V2.... V2.js
windows7-x64
3Sparta-V2.... V2.js
windows10-2004-x64
3Sparta-V2....er.txt
windows7-x64
1Sparta-V2....er.txt
windows10-2004-x64
1Sparta-V2....ock.js
windows7-x64
3Sparta-V2....ock.js
windows10-2004-x64
3Sparta-V2....ss.txt
windows7-x64
1Sparta-V2....ss.txt
windows10-2004-x64
1Analysis
-
max time kernel
836s -
max time network
837s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
23-10-2024 14:03
Behavioral task
behavioral1
Sample
Sparta-V2.5.6.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Sparta-V2.5.6.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Sparta-V2.5.6/ReadMe.txt
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Sparta-V2.5.6/ReadMe.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Sparta-V2.5.6/Sparta-V2.5.6.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Sparta-V2.5.6/Sparta-V2.5.6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Sparta-V2.5.6/VMProtectSDK64.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Sparta-V2.5.6/VMProtectSDK64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Sparta-V2.5.6/bin/coming.jpg
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Sparta-V2.5.6/bin/coming.jpg
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Sparta-V2.5.6/bin/cs2.png
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Sparta-V2.5.6/bin/cs2.png
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Sparta-V2.5.6/bin/csgo-menu.png
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Sparta-V2.5.6/bin/csgo-menu.png
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Sparta-V2.5.6/bin/exec/Scripts/Advanced Prison Life UI.txt
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Sparta-V2.5.6/bin/exec/Scripts/Advanced Prison Life UI.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Sparta-V2.5.6/bin/exec/Scripts/Anti-AFK.txt
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
Sparta-V2.5.6/bin/exec/Scripts/Anti-AFK.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Sparta-V2.5.6/bin/exec/Scripts/BrokenBonesIV.txt
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Sparta-V2.5.6/bin/exec/Scripts/BrokenBonesIV.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Sparta-V2.5.6/bin/exec/Scripts/Build A Boat For Treasure.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Sparta-V2.5.6/bin/exec/Scripts/Build A Boat For Treasure.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Sparta-V2.5.6/bin/exec/Scripts/ClickTeleport.txt
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
Sparta-V2.5.6/bin/exec/Scripts/ClickTeleport.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Sparta-V2.5.6/bin/exec/Scripts/Dex Explorer V2.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Sparta-V2.5.6/bin/exec/Scripts/Dex Explorer V2.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Sparta-V2.5.6/bin/exec/Scripts/Enable Reset Character.txt
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Sparta-V2.5.6/bin/exec/Scripts/Enable Reset Character.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Sparta-V2.5.6/bin/exec/Scripts/FPS Aimlock.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Sparta-V2.5.6/bin/exec/Scripts/FPS Aimlock.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Sparta-V2.5.6/bin/exec/Scripts/Headless.txt
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Sparta-V2.5.6/bin/exec/Scripts/Headless.txt
Resource
win10v2004-20241007-en
General
-
Target
Sparta-V2.5.6/bin/csgo-menu.png
-
Size
761KB
-
MD5
c00b4e0454948a71ea80799137269a95
-
SHA1
e15064ebdb1c966466a21943c9cc3428a7bdd1d8
-
SHA256
99a0ad9a6505e855a58460dc988a9e2104be1a31862ed0c2c2fe927d52a6f910
-
SHA512
8e9ddea16e9b1ea5c2f494ea32b50e94928437c13144b26ba51ea5db55347720c9d88b601774a501c2f5a45127d92b3dde6f8bcc7173fb2724d02e930c266d99
-
SSDEEP
12288:evMEYrlCLMfPe5V2BSyPNR71I9C4bFmxLavWGdtpMhlXF3uhb1:cSlCL78fPN2AxCLqGb1
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
rundll32.exepid process 2960 rundll32.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
rundll32.exepid process 2960 rundll32.exe 2960 rundll32.exe
Processes
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\Sparta-V2.5.6\bin\csgo-menu.png1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2960