Overview
overview
3Static
static
3Surs.zip
windows11-21h2-x64
1.gitattributes
windows11-21h2-x64
3.gradle/7....s.lock
windows11-21h2-x64
3.gradle/7....ry.bin
windows11-21h2-x64
3.gradle/7....y.lock
windows11-21h2-x64
3.gradle/7....ld.bin
windows11-21h2-x64
3.gradle/7....es.bin
windows11-21h2-x64
3.gradle/7....s.lock
windows11-21h2-x64
3.gradle/bu...p.lock
windows11-21h2-x64
3.gradle/bu...erties
windows11-21h2-x64
3.gradle/bu...es.bin
windows11-21h2-x64
3.gradle/ch...s.lock
windows11-21h2-x64
3.gradle/ch...ms.bin
windows11-21h2-x64
3.gradle/ch...ms.bin
windows11-21h2-x64
3.idea/.gitignore
windows11-21h2-x64
3.idea/Spac...on.xml
windows11-21h2-x64
1.idea/compiler.xml
windows11-21h2-x64
1.idea/gradle.vbs
windows11-21h2-x64
1.idea/jarR...es.xml
windows11-21h2-x64
1.idea/misc.xml
windows11-21h2-x64
1.idea/runC...nt.xml
windows11-21h2-x64
1.idea/runC...er.xml
windows11-21h2-x64
1.idea/uiDesigner.xml
windows11-21h2-x64
1.idea/workspace.xml
windows11-21h2-x64
1build.gradle
windows11-21h2-x64
3build/_app...og.txt
windows11-21h2-x64
3build/nati...32.dll
windows11-21h2-x64
3build/nati...64.dll
windows11-21h2-x64
1build/reso....dylib
windows11-21h2-x64
3build/reso...rpc.so
windows11-21h2-x64
3build/reso...pc.dll
windows11-21h2-x64
1build/reso...pc.dll
windows11-21h2-x64
3Analysis
-
max time kernel
89s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
21-11-2024 16:25
Static task
static1
Behavioral task
behavioral1
Sample
Surs.zip
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
.gitattributes
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
.gradle/7.1/dependencies-accessors/dependencies-accessors.lock
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
.gradle/7.1/executionHistory/executionHistory.bin
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
.gradle/7.1/executionHistory/executionHistory.lock
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
.gradle/7.1/fileChanges/last-build.bin
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
.gradle/7.1/fileHashes/fileHashes.bin
Resource
win11-20241023-en
Behavioral task
behavioral8
Sample
.gradle/7.1/fileHashes/fileHashes.lock
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
.gradle/buildOutputCleanup/buildOutputCleanup.lock
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
.gradle/buildOutputCleanup/cache.properties
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
.gradle/buildOutputCleanup/outputFiles.bin
Resource
win11-20241007-en
Behavioral task
behavioral12
Sample
.gradle/checksums/checksums.lock
Resource
win11-20241007-en
Behavioral task
behavioral13
Sample
.gradle/checksums/md5-checksums.bin
Resource
win11-20241007-en
Behavioral task
behavioral14
Sample
.gradle/checksums/sha1-checksums.bin
Resource
win11-20241007-en
Behavioral task
behavioral15
Sample
.idea/.gitignore
Resource
win11-20241007-en
Behavioral task
behavioral16
Sample
.idea/Space Horizon.xml
Resource
win11-20241007-en
Behavioral task
behavioral17
Sample
.idea/compiler.xml
Resource
win11-20241023-en
Behavioral task
behavioral18
Sample
.idea/gradle.vbs
Resource
win11-20241007-en
Behavioral task
behavioral19
Sample
.idea/jarRepositories.xml
Resource
win11-20241007-en
Behavioral task
behavioral20
Sample
.idea/misc.xml
Resource
win11-20241007-en
Behavioral task
behavioral21
Sample
.idea/runConfigurations/runClient.xml
Resource
win11-20241007-en
Behavioral task
behavioral22
Sample
.idea/runConfigurations/runServer.xml
Resource
win11-20241007-en
Behavioral task
behavioral23
Sample
.idea/uiDesigner.xml
Resource
win11-20241007-en
Behavioral task
behavioral24
Sample
.idea/workspace.xml
Resource
win11-20241007-en
Behavioral task
behavioral25
Sample
build.gradle
Resource
win11-20241007-en
Behavioral task
behavioral26
Sample
build/_applyBinpatches_2/log.txt
Resource
win11-20241007-en
Behavioral task
behavioral27
Sample
build/natives/OpenAL32.dll
Resource
win11-20241007-en
Behavioral task
behavioral28
Sample
build/natives/OpenAL64.dll
Resource
win11-20241007-en
Behavioral task
behavioral29
Sample
build/resources/main/darwin/libdiscord-rpc.dylib
Resource
win11-20241023-en
Behavioral task
behavioral30
Sample
build/resources/main/linux-x86-64/libdiscord-rpc.so
Resource
win11-20241007-en
Behavioral task
behavioral31
Sample
build/resources/main/win32-x86-64/discord-rpc.dll
Resource
win11-20241007-en
Behavioral task
behavioral32
Sample
build/resources/main/win32-x86/discord-rpc.dll
Resource
win11-20241007-en
General
-
Target
.gradle/buildOutputCleanup/buildOutputCleanup.lock
-
Size
17B
-
MD5
2db377bcbd212cb0296454d79afcc965
-
SHA1
86156c2e0845bdecbe7b5ef03ee4ee1a4645615e
-
SHA256
1ab51969fe062c7093a1a25c2ad57a347f7513f2345c5bbdf9afe15cd71c28db
-
SHA512
2ca24cdbbf3f241da32907330eedcbcab27999db90cba85616d798acfef62090ab035474aaf825b8f3b32f42fa5540c262374e2747b397729086dc6d09dadea8
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2456 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\.gradle\buildOutputCleanup\buildOutputCleanup.lock1⤵
- Modifies registry class
PID:2776
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2456