Overview

overview

10

Static

static

10

Remouse.Mi...cg.exe

windows11-21h2-x64

3

SecuriteIn...dE.exe

windows11-21h2-x64

10

SecuriteIn...ee.dll

windows11-21h2-x64

10

SecurityTa...up.exe

windows11-21h2-x64

4

Treasure.V...ox.exe

windows11-21h2-x64

3

VyprVPN.exe

windows11-21h2-x64

10

WSHSetup[1].exe

windows11-21h2-x64

3

Yard.dll

windows11-21h2-x64

10

b2bd3de3e5...2).exe

windows11-21h2-x64

10

b2bd3de3e5...3).dll

windows11-21h2-x64

10

b2bd3de3e5...4).dll

windows11-21h2-x64

10

cd9ccf8681...f7.exe

windows11-21h2-x64

10

cobaltstri...de.exe

windows11-21h2-x64

10

default.exe

windows11-21h2-x64

10

ec4f09f82d...d3.exe

windows11-21h2-x64

10

efd97b1038...ea4.js

windows11-21h2-x64

3

emotet_exe...04.exe

windows11-21h2-x64

10

emotet_exe...23.exe

windows11-21h2-x64

10

eupdate.exe

windows11-21h2-x64

3

f4f47c67be...3f.exe

windows11-21h2-x64

10

fb5d110ced...9c.exe

windows11-21h2-x64

6

fee15285c3...35.exe

windows11-21h2-x64

10

file(1).exe

windows11-21h2-x64

1

file.exe

windows11-21h2-x64

7

gjMEi6eG.exe

windows11-21h2-x64

10

good.exe

windows11-21h2-x64

5

hyundai st...1).exe

windows11-21h2-x64

10

hyundai st...10.exe

windows11-21h2-x64

10

infected d...er.exe

windows11-21h2-x64

10

inps_979.xls

windows11-21h2-x64

1

jar.jar

windows11-21h2-x64

10

june9.dll

windows11-21h2-x64

10

Resubmissions

04-12-2024 19:31

241204-x8wmhaxmcv 10

04-12-2024 11:47

241204-nybd5szkdq 10

04-12-2024 11:40

241204-nsybqazjek 10

04-12-2024 11:35

241204-np1bxatqgz 10

03-12-2024 19:23

241203-x381msvpgj 10

03-12-2024 16:27

241203-tyez8atjdv 10

Analysis

  • max time kernel
    91s
  • max time network
    205s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    04-12-2024 11:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe

  • Size

    10.5MB

  • MD5

    8103aad9a6f5ee1fb4f764fc5782822a

  • SHA1

    4fb4f963243d7cb65394e59de787aebe020b654c

  • SHA256

    4a5da8ebf650091c99c7a9d329ecb87533c337ab9e5642ff0355485ed419ec40

  • SHA512

    e65b7d2bdfda07a2ca22d109d39d98395915ee9ec486c44f358885e03bc3e9f9be0ce81706accbe412243ef8d62b9e364f6b1961cfe4469f3c3892821fccfae8

  • SSDEEP

    196608:CQq8NSRYBrs7LgUGCdpV9KhK7ByrkisRdslNn9YOa5QfKJIJM0hI/oVytz:CQq8NkYBCPGCdpbyK7ByrkikdsGOynq2

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe
    "C:\Users\Admin\AppData\Local\Temp\Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads