Overview
overview
5Static
static
3AbRoot.dll
windows7-x64
1AbRoot.dll
windows10-2004-x64
1AdTree.dll
windows7-x64
1AdTree.dll
windows10-2004-x64
1QtCore4.dll
windows7-x64
3QtCore4.dll
windows10-2004-x64
3QtGui4.dll
windows7-x64
3QtGui4.dll
windows10-2004-x64
3QtNetwork4.dll
windows7-x64
3QtNetwork4.dll
windows10-2004-x64
3QtXml4.dll
windows7-x64
3QtXml4.dll
windows10-2004-x64
3Set-up.exe
windows7-x64
3Set-up.exe
windows10-2004-x64
3StarBurn.dll
windows7-x64
3StarBurn.dll
windows10-2004-x64
3msvcp100.dll
windows7-x64
3msvcp100.dll
windows10-2004-x64
3msvcr100.dll
windows7-x64
3msvcr100.dll
windows10-2004-x64
3opengl64.exe
windows7-x64
1opengl64.exe
windows10-2004-x64
1updater/nvdisps.dll
windows7-x64
5updater/nvdisps.dll
windows10-2004-x64
5updater/nvdispsr.dll
windows7-x64
1updater/nvdispsr.dll
windows10-2004-x64
1updater/nv...32.dll
windows7-x64
3updater/nv...32.dll
windows10-2004-x64
3x64/trading_api64.dll
windows7-x64
1x64/trading_api64.dll
windows10-2004-x64
1x64/tradin...ts.dll
windows7-x64
1x64/tradin...ts.dll
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29-10-2024 09:14
Static task
static1
Behavioral task
behavioral1
Sample
AbRoot.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
AbRoot.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
AdTree.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
AdTree.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
QtCore4.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
QtCore4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
QtGui4.dll
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
QtGui4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
QtNetwork4.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
QtNetwork4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
QtXml4.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
QtXml4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Set-up.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Set-up.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
StarBurn.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
StarBurn.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
msvcp100.dll
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
msvcp100.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
msvcr100.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
msvcr100.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
opengl64.exe
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
opengl64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
updater/nvdisps.dll
Resource
win7-20241023-en
Behavioral task
behavioral24
Sample
updater/nvdisps.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
updater/nvdispsr.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
updater/nvdispsr.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
updater/nvptxJitCompiler32.dll
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
updater/nvptxJitCompiler32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
x64/trading_api64.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
x64/trading_api64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
x64/tradingnetworkingsockets.dll
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
x64/tradingnetworkingsockets.dll
Resource
win10v2004-20241007-en
General
-
Target
Set-up.exe
-
Size
6.2MB
-
MD5
11c8962675b6d535c018a63be0821e4c
-
SHA1
a150fa871e10919a1d626ffe37b1a400142f452b
-
SHA256
421e36788bfcb4433178c657d49aa711446b3a783f7697a4d7d402a503c1f273
-
SHA512
3973c23fc652e82f2415ff81f2756b55e46c6807cc4a8c37e5e31009cec45ab47c5d4228c03b5e3a972cacd6547cf0d3273965f263b1b2d608af89f5be6e459a
-
SSDEEP
98304:u4bRxuHuFP2rHLpHPA477yNRgoPbfnRROWR721LYfs17u0kcFrXLEJfwY:u4NxuOFI1AEyrbf/52BYfs1LkcFrXL+X
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
Set-up.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Set-up.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
Set-up.exepid Process 2460 Set-up.exe