Overview
overview
8Static
static
7ArgusMonit...up.exe
windows11-21h2-x64
8$PLUGINSDIR/AMIH.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3AMBattery.dll
windows11-21h2-x64
7ArgusContr...ce.exe
windows11-21h2-x64
5ArgusMonitor.exe
windows11-21h2-x64
5ArgusNetHandler.exe
windows11-21h2-x64
5GpuControl.exe
windows11-21h2-x64
1HWInit.dll
windows11-21h2-x64
5libusb-1.0.dll
windows11-21h2-x64
3Analysis
-
max time kernel
91s -
max time network
95s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
02-11-2024 06:23
Behavioral task
behavioral1
Sample
ArgusMonitor_Setup.exe
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/AMIH.dll
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
AMBattery.dll
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
ArgusControlService.exe
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
ArgusMonitor.exe
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
ArgusNetHandler.exe
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
GpuControl.exe
Resource
win11-20241023-en
Behavioral task
behavioral12
Sample
HWInit.dll
Resource
win11-20241007-en
Behavioral task
behavioral13
Sample
libusb-1.0.dll
Resource
win11-20241007-en
General
-
Target
ArgusNetHandler.exe
-
Size
1.7MB
-
MD5
4304ba8c94cccf01189a47081cfc1d0d
-
SHA1
a999489cb33cab5bb0b334953078cb73f2314a1b
-
SHA256
f14ba5fe6f3b7b82092dc9ff1507f28844ff4a7690513564e62ef269fe4fc21e
-
SHA512
16cb1eb9da3f93e26c2dd80eb00041538b5c301eb26f8de82a02b0fc3e4016ff5c359a41a4b1ad14dc09a22053bdbba618827499682166a77df489d4b4e22334
-
SSDEEP
49152:zvVYY8dHSWOkNj2elIZLs10/mpfafKNXd8qHn2ST5HgB5:TVYYCHSWrBFSJmpf48znt+5
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral10/memory/1160-0-0x0000000000180000-0x000000000071D000-memory.dmp upx behavioral10/memory/1160-3-0x0000000000180000-0x000000000071D000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
ArgusNetHandler.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ArgusNetHandler.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
ArgusNetHandler.exepid process 1160 ArgusNetHandler.exe