Overview
overview
8Static
static
3ControlSpa....4.exe
windows10-2004-x64
8$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3DanteServices.exe
windows10-2004-x64
7VC_redist.x86.exe
windows10-2004-x64
4bin/CC-xD_update.dll
windows10-2004-x64
3bin/CC64Pr...er.exe
windows10-2004-x64
3bin/CC64Up...ty.exe
windows10-2004-x64
3bin/CSDesigner.exe
windows10-2004-x64
5bin/CSupdate.exe
windows10-2004-x64
3bin/CalcEQ...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/DotNetMagic.dll
windows10-2004-x64
1bin/Newton...on.dll
windows10-2004-x64
1bin/Northw...ut.dll
windows10-2004-x64
1bin/Northwoods.Go.dll
windows10-2004-x64
1bin/PSXSer...er.exe
windows10-2004-x64
3bin/System...ty.dll
windows10-2004-x64
1bin/Tftp.Net.dll
windows10-2004-x64
1bin/UsbDll.dll
windows10-2004-x64
3bin/Utilit...te.dll
windows10-2004-x64
3bin/Utilit...r2.exe
windows10-2004-x64
3bin/Utilit....0.exe
windows10-2004-x64
3bin/WpfCon...ry.dll
windows10-2004-x64
1bin/Xceed....it.dll
windows10-2004-x64
1bin/bose_d...ib.exe
windows10-2004-x64
3bin/cab32.dll
windows10-2004-x64
3Analysis
- max time kernel
298s - max time network
320s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/07/2026, 14:20
Static task
static1
Behavioral task
behavioral1
Sample
ControlSpace Designer 5.15.4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/registry.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
DanteServices.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
VC_redist.x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
bin/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
bin/CC64Programmer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
bin/CC64UpdateUtility.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
bin/CSDesigner.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
bin/CSupdate.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
bin/CalcEQResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
bin/CalcEspResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
bin/CalcEspfResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
bin/CalcEspiResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
bin/DotNetMagic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
bin/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
bin/Northwoods.Go.Layout.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
bin/Northwoods.Go.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
bin/PSXServiceLauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
bin/System.Windows.Interactivity.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bin/Tftp.Net.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
bin/UsbDll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
bin/Utilities/CC-xD/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
bin/Utilities/CC-xD/fw-updater2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
bin/Utilities/EX-UH/UpgradeFirmware-1.0.30.0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
bin/WpfControlLibrary.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
bin/Xceed.Wpf.Toolkit.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
bin/bose_dante_lib.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
bin/cab32.dll
Resource
win10v2004-20260513-en
General
- Target bin/CC64Programmer.exe
- Size 272KB
- Sample260707-rntphsbw21
- SHA256 93a92c7312a77261f490a5f3a36050cb837d9e2f2daaa9347b20dcf6b1c3c05f
- MD5 667ad0bca7679ba9976c5f6e71fcc4a6
- SHA1 70676f7cfe4e0a5329bfe2b8962c23f2355a7737
- SHA512 302cb3d4073fe42300a465d99e288608acd18e0c74b5c73194670d3d3b03e1db6a9d2ef89cd118d582677de7ce2b76149d9dfc8cda7a34f173d1a4394dadb2cb
- SSDEEP 3072:B/rTvCpAjcfri2vwM+k4OGM8nSCckCoOhoY+WltWN2EPg2v4/NCqy7jD:hT6pAYL9+kPGM8n36oOzgN2EPmMqI
- TLSH T113444A5171D180B2C2D31A70289977642276FE9A1BE7E2836358FB0D3F79AE01F35639
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CC64Programmer.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4324 CC64Programmer.exe 4324 CC64Programmer.exe