Overview

overview

6

Static

static

4

Terabox_1.32.0.1.exe

windows10-ltsc 2021-x64

6

$PLUGINSDI...UI.dll

windows10-ltsc 2021-x64

3

$PLUGINSDI...em.dll

windows10-ltsc 2021-x64

3

$PLUGINSDI...sW.dll

windows10-ltsc 2021-x64

3

$TEMP/kernel.dll

windows10-ltsc 2021-x64

3

AppUtil.dll

windows10-ltsc 2021-x64

3

AutoUpdate...il.dll

windows10-ltsc 2021-x64

3

AutoUpdate...te.exe

windows10-ltsc 2021-x64

3

BugReport.exe

windows10-ltsc 2021-x64

5

Bull140U.dll

windows10-ltsc 2021-x64

3

ChromeNati...st.exe

windows10-ltsc 2021-x64

3

HelpUtility.exe

windows10-ltsc 2021-x64

3

TeraBox.exe

windows10-ltsc 2021-x64

5

TeraBoxHost.exe

windows10-ltsc 2021-x64

3

TeraBoxRender.exe

windows10-ltsc 2021-x64

3

TeraBoxWebService.exe

windows10-ltsc 2021-x64

3

YunDb.dll

windows10-ltsc 2021-x64

3

YunDls.dll

windows10-ltsc 2021-x64

3

YunLogic.dll

windows10-ltsc 2021-x64

3

YunOfficeAddin.dll

windows10-ltsc 2021-x64

3

YunOfficeAddin64.dll

windows10-ltsc 2021-x64

5

YunShellExt.dll

windows10-ltsc 2021-x64

3

YunShellExt64.dll

windows10-ltsc 2021-x64

5

YunUtilityService.exe

windows10-ltsc 2021-x64

3

api-ms-win...-0.dll

windows10-ltsc 2021-x64

3

api-ms-win...-0.dll

windows10-ltsc 2021-x64

3

api-ms-win...-0.dll

windows10-ltsc 2021-x64

3

api-ms-win...-0.dll

windows10-ltsc 2021-x64

3

api-ms-win...-0.dll

windows10-ltsc 2021-x64

3

api-ms-win...-0.dll

windows10-ltsc 2021-x64

3

api-ms-win...-0.dll

windows10-ltsc 2021-x64

3

api-ms-win...-0.dll

windows10-ltsc 2021-x64

3

Resubmissions

27-11-2024 20:39

241127-zfpdtszjes 6

27-11-2024 20:33

241127-zbwbksvqhl 6

25-11-2024 22:14

241125-15w1mswlcp 6

25-11-2024 20:57

241125-zryrmswke1 6

28-09-2024 18:21

240928-wzje5ssdlc 10

Analysis

  • max time kernel
    103s
  • max time network
    112s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    27-11-2024 20:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ChromeNativeMessagingHost.exe

  • Size

    126KB

  • MD5

    4c66734f2a19397055268103a85bac36

  • SHA1

    c7edc91d6af3a68180766aa81270a9d7893240b9

  • SHA256

    e64fdae21ca4287e2f8c1b6affa0f58d8d1f9b5fd4f385732e3b69e183ada963

  • SHA512

    ba274d14c95752f2f4c22d0049e184d9506a1361726078e25b633a8d6d42f9e30de3fdf5b1515bee4a3417f0a4fe83f10913be2a28f75af46e304ea60fcba5a4

  • SSDEEP

    1536:e3g0SyOZkuKe2nzGik0QkDYhH5RKA2CEKlXR4LYO1L7nnnvnTPei:e3g0SywqqhH5RKA2k1R48O1fnvT2

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\ChromeNativeMessagingHost.exe
    "C:\Users\Admin\AppData\Local\Temp\ChromeNativeMessagingHost.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads