Overview
overview
7Static
static
3possibly m...7z.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
37-zip.chm
windows10-2004-x64
17-zip.dll
windows10-2004-x64
37z.dll
windows10-2004-x64
37z.exe
windows10-2004-x64
37z.exe
windows10-2004-x64
37zCon.exe
windows10-2004-x64
37zFM.exe
windows10-2004-x64
37zG.exe
windows10-2004-x64
3Uninstall.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3possibly m...P2.exe
windows10-2004-x64
6possibly m...er.exe
windows10-2004-x64
6possibly m...ar.exe
windows10-2004-x64
3possibly m...er.exe
windows10-2004-x64
3possibly m...AR.exe
windows10-2004-x64
3possibly m...ll.exe
windows10-2004-x64
3possibly m...AR.exe
windows10-2004-x64
3possibly m...cp.exe
windows10-2004-x64
7Analysis
-
max time kernel
33s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-uk -
resource tags
arch:x64arch:x86image:win10v2004-20241007-uklocale:uk-uaos:windows10-2004-x64systemwindows -
submitted
21/11/2024, 10:59
Static task
static1
Behavioral task
behavioral1
Sample
possibly malware/7z.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral2
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-uk
Behavioral task
behavioral3
Sample
7-zip.chm
Resource
win10v2004-20241007-uk
Behavioral task
behavioral4
Sample
7-zip.dll
Resource
win10v2004-20241007-uk
Behavioral task
behavioral5
Sample
7z.dll
Resource
win10v2004-20241007-uk
Behavioral task
behavioral6
Sample
7z.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral7
Sample
7z.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral8
Sample
7zCon.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral9
Sample
7zFM.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral10
Sample
7zG.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral11
Sample
Uninstall.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral12
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-uk
Behavioral task
behavioral13
Sample
possibly malware/AIMP2.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral14
Sample
possibly malware/FoxitReader.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral15
Sample
possibly malware/Rar.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral16
Sample
possibly malware/RarExtLoader.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral17
Sample
possibly malware/UnRAR.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral18
Sample
possibly malware/Uninstall.exe
Resource
win10v2004-20241007-uk
Behavioral task
behavioral19
Sample
possibly malware/WinRAR.exe
Resource
win10v2004-20241007-uk
General
-
Target
possibly malware/UnRAR.exe
-
Size
203KB
-
MD5
f97ced86d1fb5a76b695cef4aade517a
-
SHA1
661c5ee57075281d502dec79e7d9a15b37eb3d6d
-
SHA256
759e83927873607f56b35540c4b8a3c9efd6cdcdfa112f2ff6b7fff5ebcdee66
-
SHA512
d2103c26b9a91c833534f14fe8e0e1b712fc29d68957de9858437f157cb309e229d59471b262c9420e64e8312afcaa8677fd1d4e8f514b6de5349ebd58e6268a
-
SSDEEP
3072:9iuEE0E/zazhBG/OTDnQbH5V+epBdizwuMu2swpSlbOK/GSsXJ82C7HB4DZN:8ntrhLYbb+q7blAFsXJ82CzB4NN
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UnRAR.exe