Overview
overview
3Static
static
3AbRoot.dll
windows7-x64
1AbRoot.dll
windows10-2004-x64
1AdTree.dll
windows7-x64
1AdTree.dll
windows10-2004-x64
1QtCore4.dll
windows7-x64
3QtCore4.dll
windows10-2004-x64
3QtGui4.dll
windows7-x64
3QtGui4.dll
windows10-2004-x64
3QtNetwork4.dll
windows7-x64
3QtNetwork4.dll
windows10-2004-x64
3QtWebKit4.dll
windows7-x64
3QtWebKit4.dll
windows10-2004-x64
3Setup.exe
windows7-x64
3Setup.exe
windows10-2004-x64
3iasdatastore.dll
windows10-2004-x64
3msvcp100.dll
windows7-x64
3msvcp100.dll
windows10-2004-x64
3msvcr100.dll
windows7-x64
3msvcr100.dll
windows10-2004-x64
3opengl64.exe
windows7-x64
1opengl64.exe
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
26-10-2024 02:21
Static task
static1
Behavioral task
behavioral1
Sample
AbRoot.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
AbRoot.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
AdTree.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
AdTree.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
QtCore4.dll
Resource
win7-20241023-en
Behavioral task
behavioral6
Sample
QtCore4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
QtGui4.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
QtGui4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
QtNetwork4.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
QtNetwork4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
QtWebKit4.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
QtWebKit4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
iasdatastore.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
msvcp100.dll
Resource
win7-20241010-en
Behavioral task
behavioral17
Sample
msvcp100.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
msvcr100.dll
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
msvcr100.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
opengl64.exe
Resource
win7-20241010-en
Behavioral task
behavioral21
Sample
opengl64.exe
Resource
win10v2004-20241007-en
General
-
Target
Setup.exe
-
Size
80KB
-
MD5
2a8613b7d99903516b8fe02fd820bf52
-
SHA1
78a96addcb556ab1d490fac80f929305263d06b9
-
SHA256
f1d68c5e7c7660d4f2ce412c109b7fe3e088872fa0ebe61ca9ab9dd92a496407
-
SHA512
af0902aeb6169ea507b787da7b61c3533df4610c3f51c1d8f65dfc9008c8ce2580f2d86a49a4d0acc2c51c731f3e4c447d0d1d8e779dc1c75e43d30b79c46436
-
SSDEEP
1536:9A8oAY5SXfidLez+Q+EGfdUHLLXJ+CqoVpPBucQwk7qnKXKo5OMY8xk03ben8TK:M7Ohz+Q+EGlUHLLXJ+CqoTPBucQwktXS
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
Setup.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Setup.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
Setup.exepid Process 1900 Setup.exe