Overview
overview
10Static
static
1Resolute 16x.zip
windows10-ltsc 2021-x64
8Resolute 1...rt.jpg
windows10-ltsc 2021-x64
7Resolute 1...it.txt
windows10-ltsc 2021-x64
1Resolute 1...ts.txt
windows10-ltsc 2021-x64
1Resolute 1...erties
windows10-ltsc 2021-x64
3Resolute 1...ga.png
windows10-ltsc 2021-x64
7Resolute 1...erties
windows10-ltsc 2021-x64
3Resolute 1...t8.png
windows10-ltsc 2021-x64
7Resolute 1...00.png
windows10-ltsc 2021-x64
7Resolute 1...01.png
windows10-ltsc 2021-x64
10Resolute 1...02.png
windows10-ltsc 2021-x64
7Resolute 1...03.png
windows10-ltsc 2021-x64
7Resolute 1...04.png
windows10-ltsc 2021-x64
7Resolute 1...05.png
windows10-ltsc 2021-x64
7Resolute 1...06.png
windows10-ltsc 2021-x64
7Resolute 1...07.png
windows10-ltsc 2021-x64
7Resolute 1...09.png
windows10-ltsc 2021-x64
7Resolute 1...0a.png
windows10-ltsc 2021-x64
7Resolute 1...0b.png
windows10-ltsc 2021-x64
7Resolute 1...0c.png
windows10-ltsc 2021-x64
7Resolute 1...0d.png
windows10-ltsc 2021-x64
7Resolute 1...0e.png
windows10-ltsc 2021-x64
7Resolute 1...0f.png
windows10-ltsc 2021-x64
7Resolute 1...10.png
windows10-ltsc 2021-x64
7Resolute 1...11.png
windows10-ltsc 2021-x64
7Resolute 1...12.png
windows10-ltsc 2021-x64
7Resolute 1...13.png
windows10-ltsc 2021-x64
7Resolute 1...14.png
windows10-ltsc 2021-x64
7Resolute 1...15.png
windows10-ltsc 2021-x64
7Resolute 1...16.png
windows10-ltsc 2021-x64
7Resolute 1...17.png
windows10-ltsc 2021-x64
7Resolute 1...18.png
windows10-ltsc 2021-x64
7Resubmissions
07-01-2025 19:20
250107-x14m5swqdr 106-01-2025 20:49
250106-zmb23szjgp 806-01-2025 20:34
250106-zcfyaayqbp 1006-01-2025 20:12
250106-yyyjsawpbs 10Analysis
-
max time kernel
417s -
max time network
428s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
06-01-2025 20:12
Static task
static1
Behavioral task
behavioral1
Sample
Resolute 16x.zip
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral2
Sample
Resolute 16x/color chart.jpg
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral3
Sample
Resolute 16x/credit.txt
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral4
Sample
Resolute 16x/credits.txt
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral5
Sample
Resolute 16x/font/ascii.properties
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral6
Sample
Resolute 16x/font/ascii_sga.png
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral7
Sample
Resolute 16x/font/ascii_sga.properties
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral8
Sample
Resolute 16x/font/default8.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral9
Sample
Resolute 16x/font/glyph_00.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral10
Sample
Resolute 16x/font/glyph_01.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral11
Sample
Resolute 16x/font/glyph_02.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral12
Sample
Resolute 16x/font/glyph_03.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral13
Sample
Resolute 16x/font/glyph_04.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral14
Sample
Resolute 16x/font/glyph_05.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral15
Sample
Resolute 16x/font/glyph_06.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral16
Sample
Resolute 16x/font/glyph_07.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral17
Sample
Resolute 16x/font/glyph_09.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral18
Sample
Resolute 16x/font/glyph_0a.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral19
Sample
Resolute 16x/font/glyph_0b.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral20
Sample
Resolute 16x/font/glyph_0c.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral21
Sample
Resolute 16x/font/glyph_0d.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral22
Sample
Resolute 16x/font/glyph_0e.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral23
Sample
Resolute 16x/font/glyph_0f.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral24
Sample
Resolute 16x/font/glyph_10.png
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral25
Sample
Resolute 16x/font/glyph_11.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral26
Sample
Resolute 16x/font/glyph_12.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral27
Sample
Resolute 16x/font/glyph_13.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral28
Sample
Resolute 16x/font/glyph_14.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral29
Sample
Resolute 16x/font/glyph_15.png
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral30
Sample
Resolute 16x/font/glyph_16.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral31
Sample
Resolute 16x/font/glyph_17.png
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral32
Sample
Resolute 16x/font/glyph_18.png
Resource
win10ltsc2021-20241211-en
General
-
Target
Resolute 16x/font/ascii_sga.properties
-
Size
645B
-
MD5
73c6c0a9c8960a4f9b573cfb81814737
-
SHA1
93b6fd5d504e0a1f44a02739f9d1bade7cde6cb3
-
SHA256
36795be5d2101d2c724d97ef5b2b788bfa7696e62b1904346dceb98f23f0488f
-
SHA512
71da31e6bd605450cece1e27a6af76e4b2b1e887bb45aa747856f56640304fa5577cef7c53a471c1ee5bcf3e2850470a2b8e16eab4dd9932ebd1ba3d71b9e85e
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3506525125-3566313221-3651816328-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3506525125-3566313221-3651816328-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4200 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Resolute 16x\font\ascii_sga.properties"1⤵
- Modifies registry class
PID:2760
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4200