Overview
overview
7Static
static
3dia-setup-...1).exe
windows7-x64
7dia-setup-...1).exe
windows10-2004-x64
7help/eu/di...al.chm
windows7-x64
1help/eu/di...al.chm
windows10-2004-x64
1help/eu/di...al.pdf
windows7-x64
3help/eu/di...al.pdf
windows10-2004-x64
3help/fr/di...al.chm
windows7-x64
1help/fr/di...al.chm
windows10-2004-x64
1help/fr/di...al.pdf
windows7-x64
3help/fr/di...al.pdf
windows10-2004-x64
3help/pl/di...al.chm
windows7-x64
1help/pl/di...al.chm
windows10-2004-x64
1help/pl/di...al.pdf
windows7-x64
3help/pl/di...al.pdf
windows10-2004-x64
3imgmap.py
windows7-x64
3imgmap.py
windows10-2004-x64
3lib/gdk-pi...ni.dll
windows7-x64
3lib/gdk-pi...ni.dll
windows10-2004-x64
3lib/gdk-pi...mp.dll
windows7-x64
3lib/gdk-pi...mp.dll
windows10-2004-x64
3lib/gdk-pi...if.dll
windows7-x64
3lib/gdk-pi...if.dll
windows10-2004-x64
3lib/gdk-pi...ns.dll
windows7-x64
3lib/gdk-pi...ns.dll
windows10-2004-x64
3lib/gdk-pi...co.dll
windows7-x64
3lib/gdk-pi...co.dll
windows10-2004-x64
3lib/gdk-pi...eg.dll
windows7-x64
3lib/gdk-pi...eg.dll
windows10-2004-x64
3lib/gdk-pi...cx.dll
windows7-x64
3lib/gdk-pi...cx.dll
windows10-2004-x64
3lib/gdk-pi...ng.dll
windows7-x64
3lib/gdk-pi...ng.dll
windows10-2004-x64
3Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/11/2024, 22:03
Behavioral task
behavioral1
Sample
dia-setup-0.97.2-2-unsigned (1).exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dia-setup-0.97.2-2-unsigned (1).exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
help/eu/dia-manual.chm
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
help/eu/dia-manual.chm
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
help/eu/dia-manual.pdf
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
help/eu/dia-manual.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
help/fr/dia-manual.chm
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
help/fr/dia-manual.chm
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
help/fr/dia-manual.pdf
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
help/fr/dia-manual.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
help/pl/dia-manual.chm
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
help/pl/dia-manual.chm
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
help/pl/dia-manual.pdf
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
help/pl/dia-manual.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
imgmap.py
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
imgmap.py
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ani.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ani.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-bmp.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-bmp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-gif.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-gif.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-icns.dll
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-icns.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ico.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ico.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-jpeg.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-jpeg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-pcx.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-pcx.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.dll
Resource
win7-20241023-en
Behavioral task
behavioral32
Sample
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.dll
Resource
win10v2004-20241007-en
General
-
Target
lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ani.dll
-
Size
30KB
-
MD5
ad674e2d99f06c4f81491b287d454400
-
SHA1
538b92c8850deb9c1a348f713671221daef58b47
-
SHA256
a0b7226efb9dfce34a7c90f0e91c8b31555c9bbd58c19ac8c761598233fd462e
-
SHA512
ddd902d5f5a57e6cde20f18645f4f8a81ca81ea7a3f76b51a98303b2415bdddbe37a5cb6cf21becff71d2f359a5de0804336b130be45b7b32ede0b7057737e88
-
SSDEEP
384:UXGvUCD9AYQ5MQHlvcoPakvyCI2sF+FIwBPClYwoNeJBZc:UyDlQ9FcoPhvyCIQB2B+
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4488 wrote to memory of 1556 4488 rundll32.exe 85 PID 4488 wrote to memory of 1556 4488 rundll32.exe 85 PID 4488 wrote to memory of 1556 4488 rundll32.exe 85
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4488 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ani.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:1556
-