Overview
overview
8Static
static
7ArgusMonit...up.exe
windows11-21h2-x64
8$PLUGINSDIR/AMIH.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3AMBattery.dll
windows11-21h2-x64
7ArgusContr...ce.exe
windows11-21h2-x64
5ArgusMonitor.exe
windows11-21h2-x64
5ArgusNetHandler.exe
windows11-21h2-x64
5GpuControl.exe
windows11-21h2-x64
1HWInit.dll
windows11-21h2-x64
5libusb-1.0.dll
windows11-21h2-x64
3Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
02-11-2024 06:23
Behavioral task
behavioral1
Sample
ArgusMonitor_Setup.exe
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/AMIH.dll
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
AMBattery.dll
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
ArgusControlService.exe
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
ArgusMonitor.exe
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
ArgusNetHandler.exe
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
GpuControl.exe
Resource
win11-20241023-en
Behavioral task
behavioral12
Sample
HWInit.dll
Resource
win11-20241007-en
Behavioral task
behavioral13
Sample
libusb-1.0.dll
Resource
win11-20241007-en
General
-
Target
ArgusControlService.exe
-
Size
1022KB
-
MD5
f19e96083c2dc71f3c40cb4d6068494c
-
SHA1
f678948a7aace21c90e6ccdffa83c2488184f6c8
-
SHA256
22cd5a700208623c9dc874cc2d6ec1aef29942317d702cdebd21495004d80c6f
-
SHA512
12fba7ce7730fcb760924de18595b13b59df8194c4c672afe2d488799eb74e3b3c34c53053f35915843e172a893c9d5b1ac272788f6cc949d5927882a5e4c6e6
-
SSDEEP
24576:mM+Ifc2eO/bu1mJyrCx7dAcghBoqlNEl0wTGJmh:aIfUoM87dkhB4lNCW
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral8/memory/4084-0-0x0000000000640000-0x0000000000976000-memory.dmp upx behavioral8/memory/4084-2-0x0000000000640000-0x0000000000976000-memory.dmp upx behavioral8/memory/4084-5-0x0000000000640000-0x0000000000976000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
ArgusControlService.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ArgusControlService.exe