Overview
overview
5Static
static
544862e37ec...2N.exe
windows7-x64
344862e37ec...2N.exe
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3e$EXEFILE.exe
windows7-x64
3e$EXEFILE.exe
windows10-2004-x64
1wget.exe
windows7-x64
5wget.exe
windows10-2004-x64
5Analysis
-
max time kernel
23s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
30-11-2024 05:07
Behavioral task
behavioral1
Sample
44862e37ec4010331cfa4d2f43579eea8e31cead26fd75a431e6760b7e9500a2N.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
44862e37ec4010331cfa4d2f43579eea8e31cead26fd75a431e6760b7e9500a2N.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
e$EXEFILE.exe
Resource
win7-20241023-en
Behavioral task
behavioral10
Sample
e$EXEFILE.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
wget.exe
Resource
win7-20240903-en
General
-
Target
e$EXEFILE.exe
-
Size
624KB
-
MD5
8b91908378b93e3a45ec01662928027d
-
SHA1
0362f9e83e55c9bb68c3b51bc01d3a984dda1e74
-
SHA256
5107a069f76ea6a2ffde6ae4adafa3c2ebcee7e12c5f2ee96e8000a0a9dc0ad3
-
SHA512
98f731f31088430f4470ac810d5dd9d6a779c67422e8a84e440f993af1c1d5d9b68073314cbe81cc7474e9062f834fe1152d389431b25b26dce6c4cb5ac46371
-
SSDEEP
12288:6yKzyPJNE/2DtVI5siaEhYqaf/+CGPFP2XKOwLql:QeatBhYqaepVOwLq
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2908 e$EXEFILE.exe 2908 e$EXEFILE.exe