Overview

overview

10

Static

static

10

Assets/D3D...re.dll

windows10-2004-x64

1

Assets/D3D...se.dll

windows10-2004-x64

3

Assets/D3D...32.dll

windows10-2004-x64

1

NL.exe

windows10-2004-x64

8

Plugin/1.exe

windows10-2004-x64

3

Plugin/10.exe

windows10-2004-x64

3

Plugin/2.exe

windows10-2004-x64

3

Plugin/3.exe

windows10-2004-x64

3

Plugin/4.exe

windows10-2004-x64

3

Plugin/5.exe

windows10-2004-x64

3

Plugin/6.exe

windows10-2004-x64

3

Plugin/7.exe

windows10-2004-x64

1

Plugin/8.exe

windows10-2004-x64

3

Plugin/9.exe

windows10-2004-x64

3

Plugin/Andex.exe

windows10-2004-x64

3

Plugin/Duck.exe

windows10-2004-x64

3

Plugin/Gren.exe

windows10-2004-x64

1

Plugin/P.exe

windows10-2004-x64

3

Plugin/cam.dll

windows10-2004-x64

3

Plugin/ch.exe

windows10-2004-x64

1

Plugin/chrome.exe

windows10-2004-x64

3

Plugin/cmd.exe

windows10-2004-x64

3

Plugin/dneg.exe

windows10-2004-x64

1

Plugin/explorer.exe

windows10-2004-x64

3

Plugin/explorerr.exe

windows10-2004-x64

3

Plugin/firefox.exe

windows10-2004-x64

3

Plugin/hms.exe

windows10-2004-x64

1

Plugin/inf.dll

windows10-2004-x64

1

Plugin/mic.dll

windows10-2004-x64

1

Plugin/mpress.exe

windows10-2004-x64

3

Plugin/pd.dll

windows10-2004-x64

1

Plugin/plg.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-01-2025 18:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Plugin/explorer.exe

  • Size

    29KB

  • MD5

    9cc05ec9d58102696092dd1ab9103fc2

  • SHA1

    d4019f352ea64504a357c6447c56f79e06602131

  • SHA256

    2e05264acc620b4828ec23550351bdaa7cc429fb273ecc4450ea58f2b20b7f61

  • SHA512

    a74f5ebbe8f154857af1408aabc2fab30240ff5dd892d5aa9b510c63d51cb8c67605ff6c34459d620c10bb9d13085ac34072235b7bea274605014f9f8a7dbe55

  • SSDEEP

    384:wfBLiyh61NmBpvl3rcA8k0H1sGvfcLk24jXPlCuoo/SYsjDsqIWS:s2TXmB1p3Q1sGHw2XPrv

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Plugin\explorer.exe
    "C:\Users\Admin\AppData\Local\Temp\Plugin\explorer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1396

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1396-0-0x0000000074D9E000-0x0000000074D9F000-memory.dmp

    Filesize

    4KB

    Download

  • memory/1396-1-0x00000000008A0000-0x00000000008AE000-memory.dmp

    Filesize

    56KB

    Download

  • memory/1396-2-0x00000000052D0000-0x000000000536C000-memory.dmp

    Filesize

    624KB

    Download

  • memory/1396-3-0x0000000005920000-0x0000000005EC4000-memory.dmp

    Filesize

    5.6MB

    Download

  • memory/1396-4-0x0000000005370000-0x0000000005402000-memory.dmp

    Filesize

    584KB

    Download

  • memory/1396-5-0x0000000005290000-0x000000000529A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/1396-6-0x0000000074D90000-0x0000000075540000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/1396-7-0x0000000005470000-0x00000000054C6000-memory.dmp

    Filesize

    344KB

    Download

  • memory/1396-8-0x0000000074D9E000-0x0000000074D9F000-memory.dmp

    Filesize

    4KB

    Download

  • memory/1396-9-0x0000000074D90000-0x0000000075540000-memory.dmp

    Filesize

    7.7MB

    Download