Overview
overview
7Static
static
1Nightlight-v.1.6.zip
windows10-2004-x64
7Nightlight...DME.md
windows10-2004-x64
3Nightlight...er.jpg
windows10-2004-x64
3Nightlight...ui.jpg
windows10-2004-x64
3Nightlight...ix.txt
windows10-2004-x64
1Nightlight...rd.png
windows10-2004-x64
3Nightlight...lp.png
windows10-2004-x64
3Nightlight...me.png
windows10-2004-x64
3Nightlight...ix.bat
windows10-2004-x64
1Nightlight...ht.exe
windows10-2004-x64
7loader-o.pyc
windows10-2004-x64
3Nightlight...ts.txt
windows10-2004-x64
1Nightlight...up.bat
windows10-2004-x64
1Analysis
- max time kernel
95s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 01:03
Static task
static1
Behavioral task
behavioral1
Sample
Nightlight-v.1.6.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
Nightlight-v.1.6/README.md
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Nightlight-v.1.6/decoration/banner.jpg
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
Nightlight-v.1.6/decoration/nightlightgui.jpg
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Nightlight-v.1.6/fix.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
Nightlight-v.1.6/gui_images/clipboard.png
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Nightlight-v.1.6/gui_images/help.png
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
Nightlight-v.1.6/gui_images/home.png
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Nightlight-v.1.6/modules/modulefix.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
Nightlight-v.1.6/nightlight.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
loader-o.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
Nightlight-v.1.6/requirements.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Nightlight-v.1.6/setup.bat
Resource
win10v2004-20241007-en
General
- Target loader-o.pyc
- Size 4.6MB
- Sample241110-behynawejd
- SHA256 dc9236364da776e091a1fae2a51d71c909180724d386b9b3866cd4b921c0e267
- MD5 b87c750a9fcea1691d6a6e5d98925db8
- SHA1 c19bcc87c3302b9f136dbc5fbfc2ef1154646e93
- SHA512 75bbe0db8eaf11f8bf11f2e6a375e67767891c5e9cf0fdcd414ca0152b125b48173160af17ebb66944ec6c7b32401f302267de992adc813c7948b3abddb9f239
- SSDEEP 3072:B4gwoV+6T4hoVoQKrW1FuixTfayVpIJiRYhVOUXsXzYsWUHgxT605AAvFCZjKPH0:7sUt
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2828 OpenWith.exe