Overview
overview
10Static
static
33d7d2fbff0...44.exe
windows7-x64
103d7d2fbff0...44.exe
windows10-2004-x64
10$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/w7tbp.dll
windows7-x64
3$PLUGINSDIR/w7tbp.dll
windows10-2004-x64
3App/UltraI...SO.exe
windows7-x64
3App/UltraI...SO.exe
windows10-2004-x64
3App/UltraI...lg.exe
windows7-x64
3App/UltraI...lg.exe
windows10-2004-x64
3App/UltraI...ve.sys
windows7-x64
1App/UltraI...ve.sys
windows10-2004-x64
1App/UltraI...64.sys
windows7-x64
1App/UltraI...64.sys
windows10-2004-x64
1App/UltraI...md.exe
windows7-x64
1App/UltraI...md.exe
windows10-2004-x64
3App/UltraI...rt.exe
windows7-x64
3App/UltraI...rt.exe
windows10-2004-x64
3App/UltraI...rt.sys
windows7-x64
1App/UltraI...rt.sys
windows10-2004-x64
1App/UltraI...64.sys
windows7-x64
1App/UltraI...64.sys
windows10-2004-x64
1App/UltraI...ll.dll
windows7-x64
3App/UltraI...ll.dll
windows10-2004-x64
3App/UltraI...64.dll
windows7-x64
5App/UltraI...64.dll
windows10-2004-x64
5App/UltraI...nc.dll
windows7-x64
3App/UltraI...nc.dll
windows10-2004-x64
3Analysis
-
max time kernel
91s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2024 21:30
Static task
static1
Behavioral task
behavioral1
Sample
3d7d2fbff056715df82ff6087da813f9eab7626231db45788506896fa399ca44.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3d7d2fbff056715df82ff6087da813f9eab7626231db45788506896fa399ca44.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/w7tbp.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/w7tbp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
App/UltraISO/UltraISO.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
App/UltraISO/UltraISO.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
App/UltraISO/drivers/FileDlg.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
App/UltraISO/drivers/FileDlg.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
App/UltraISO/drivers/ISODrive.sys
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
App/UltraISO/drivers/ISODrive.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
App/UltraISO/drivers/ISODrv64.sys
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
App/UltraISO/drivers/ISODrv64.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
App/UltraISO/drivers/IsoCmd.exe
Resource
win7-20241023-en
Behavioral task
behavioral20
Sample
App/UltraISO/drivers/IsoCmd.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
App/UltraISO/drivers/bootpart.exe
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
App/UltraISO/drivers/bootpart.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
App/UltraISO/drivers/bootpart.sys
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
App/UltraISO/drivers/bootpart.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
App/UltraISO/drivers/bootpt64.sys
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
App/UltraISO/drivers/bootpt64.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
App/UltraISO/isoshell.dll
Resource
win7-20241023-en
Behavioral task
behavioral28
Sample
App/UltraISO/isoshell.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
App/UltraISO/isoshl64.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
App/UltraISO/isoshl64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
App/UltraISO/lame_enc.dll
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
App/UltraISO/lame_enc.dll
Resource
win10v2004-20241007-en
General
-
Target
App/UltraISO/drivers/FileDlg.exe
-
Size
83KB
-
MD5
b1cd3f9e805d2225133ba99ca93d34bc
-
SHA1
44d16b2677eec775b99ac6c85a6a7f533e0d5550
-
SHA256
2fa5c3457aacb299886d27254a5da71d4b7715c41ed57f10a492b48e8f8f37c5
-
SHA512
1efdeec7194bd99697e27c1fa042a728ee3acc6e048ac0e1ce47ca21994ea4907c6ce901cfa8c757e08c06719da12171168d6f10d5b8f20c1d8942c49a3fb3a4
-
SSDEEP
1536:+tsgg9Vh3Bk9v46Xp5mtyyS7pxY93zl4WjAU5vDGfEr8GEGkDYZxjDbzDbv:+tsBVxBk9vNOaxqDl4kAqCEJZx3Tj
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language FileDlg.exe