Overview
overview
5Static
static
51aa60e99e1...2f.exe
windows7-x64
41aa60e99e1...2f.exe
windows10-2004-x64
4$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$_1_/Panor...th.exe
windows7-x64
1$_1_/Panor...th.exe
windows10-2004-x64
3Order_de.html
windows7-x64
3Order_de.html
windows10-2004-x64
3Order_en.html
windows7-x64
3Order_en.html
windows10-2004-x64
3Order_fr.html
windows7-x64
3Order_fr.html
windows10-2004-x64
3PanoramaSt...ch.pdf
windows7-x64
3PanoramaSt...ch.pdf
windows10-2004-x64
3PanoramaSt...al.pdf
windows7-x64
3PanoramaSt...al.pdf
windows10-2004-x64
3PanoramaSt...ro.exe
windows7-x64
3PanoramaSt...ro.exe
windows10-2004-x64
1PanoramaSt...on.pdf
windows7-x64
3PanoramaSt...on.pdf
windows10-2004-x64
3PanoramaSt...on.pdf
windows7-x64
3PanoramaSt...on.pdf
windows10-2004-x64
3PanoramaSt...wer.js
windows7-x64
3PanoramaSt...wer.js
windows10-2004-x64
3Qt5CoreR.dll
windows7-x64
1Qt5CoreR.dll
windows10-2004-x64
1Qt5GuiR.dll
windows7-x64
1Qt5GuiR.dll
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21-11-2024 03:18
Behavioral task
behavioral1
Sample
1aa60e99e1a78cdc167e64e85a7bc75b338767e58563c40e84b695d02a98ce2f.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
1aa60e99e1a78cdc167e64e85a7bc75b338767e58563c40e84b695d02a98ce2f.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$_1_/PanoramaStudio4Pro.lrplugin/win/appPath.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$_1_/PanoramaStudio4Pro.lrplugin/win/appPath.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Order_de.html
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Order_de.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Order_en.html
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Order_en.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Order_fr.html
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Order_fr.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
PanoramaStudio Handbuch.pdf
Resource
win7-20241023-en
Behavioral task
behavioral18
Sample
PanoramaStudio Handbuch.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
PanoramaStudio Manual.pdf
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
PanoramaStudio Manual.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
PanoramaStudio4Pro.exe
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
PanoramaStudio4Pro.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
PanoramaStudioViewer/Documentation.pdf
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
PanoramaStudioViewer/Documentation.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
PanoramaStudioViewer/Dokumentation.pdf
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
PanoramaStudioViewer/Dokumentation.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
PanoramaStudioViewer/panoStudioViewer.js
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
PanoramaStudioViewer/panoStudioViewer.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Qt5CoreR.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Qt5CoreR.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Qt5GuiR.dll
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
Qt5GuiR.dll
Resource
win10v2004-20241007-en
General
-
Target
PanoramaStudio4Pro.exe
-
Size
13.6MB
-
MD5
c5729d836ed9f9cb0703c856432ad358
-
SHA1
0440101321f5f61f6fd67c4f5030235874ab1db1
-
SHA256
67072e2607cfa8dfe7b03a3160777cc5c09eb9d48bb19cc9fbc08dd4958c8b60
-
SHA512
b32a696cdf637372f5bf901396cf4b005a05a437caf537ea38f92ad698724c03045119e3c2022fc2738c8c8ccbc31ee8c9b322ac77b394c54a67127b820c0e85
-
SSDEEP
196608:EEwQC/8jeN5BRIvdBXiUpBIaiYKaV/SWItmkH:0c6GPXXIaiYKaV/SWItdH
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
PanoramaStudio4Pro.exepid process 2308 PanoramaStudio4Pro.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
PanoramaStudio4Pro.exepid process 2308 PanoramaStudio4Pro.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
PanoramaStudio4Pro.exepid process 2308 PanoramaStudio4Pro.exe