Overview
overview
5Static
static
5ChipGenius...01.rar
windows10-2004-x64
1ChipGenius...01.rar
windows11-21h2-x64
1ChipGenius...01.exe
windows10-2004-x64
3ChipGenius...01.exe
windows11-21h2-x64
3ChipGenius...ps.wdb
windows10-2004-x64
3ChipGenius...ps.wdb
windows11-21h2-x64
3ChipGenius...er.exe
windows10-2004-x64
5ChipGenius...er.exe
windows11-21h2-x64
5out.exe
windows10-2004-x64
out.exe
windows11-21h2-x64
3readme.txt
windows10-2004-x64
1readme.txt
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/06/2026, 01:42
Behavioral task
behavioral1
Sample
ChipGenius_v4_21_0701.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ChipGenius_v4_21_0701.rar
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
ChipGenius_v4_21_0701/ChipGenius_v4_21_0701.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ChipGenius_v4_21_0701/ChipGenius_v4_21_0701.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
ChipGenius_v4_21_0701/Chips.wdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ChipGenius_v4_21_0701/Chips.wdb
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
ChipGenius_v4_21_0701/FlashMaster.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ChipGenius_v4_21_0701/FlashMaster.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
out.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
out.exe
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
readme.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
readme.txt
Resource
win11-20260513-en
General
- Target ChipGenius_v4_21_0701/FlashMaster.exe
- Size 622KB
- Sample260603-b44awsf16v
- SHA256 d42736052810166f929b11e986a7e20a2fb3e2d686473fb07a8aa2b7e9421d38
- MD5 f90e2b5796159a7166e4c055abd3feb0
- SHA1 2d57b4e8fc144bc81d184acfa85bea834df0c238
- SHA512 8457405675576641be700be81a183073b2d2216dc7f3bed934998a306d3b27f43b616e3019124103deb3b6f89742b584d1860298b43e5959a8a8adc0246f0e94
- SSDEEP 12288:q7dxANIkHepjDsHSN23Cfh5A02RaUcdNaOk3ZQKtKED4l1Pj5:qylHepjY+h5A02R+u5/p45
- TLSH T139D4123E8DE09961F060E438AA33D53E81476D609D041B27F776FDD163BF2AB29DA805
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral7/memory/4196-0-0x0000000000400000-0x000000000057B000-memory.dmp upx behavioral7/memory/4196-2-0x0000000000400000-0x000000000057B000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language FlashMaster.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4196 FlashMaster.exe 4196 FlashMaster.exe