Overview
overview
8Static
static
3ControlSpa....4.exe
windows10-2004-x64
8$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3DanteServices.exe
windows10-2004-x64
7VC_redist.x86.exe
windows10-2004-x64
4bin/CC-xD_update.dll
windows10-2004-x64
3bin/CC64Pr...er.exe
windows10-2004-x64
3bin/CC64Up...ty.exe
windows10-2004-x64
3bin/CSDesigner.exe
windows10-2004-x64
5bin/CSupdate.exe
windows10-2004-x64
3bin/CalcEQ...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/DotNetMagic.dll
windows10-2004-x64
1bin/Newton...on.dll
windows10-2004-x64
1bin/Northw...ut.dll
windows10-2004-x64
1bin/Northwoods.Go.dll
windows10-2004-x64
1bin/PSXSer...er.exe
windows10-2004-x64
3bin/System...ty.dll
windows10-2004-x64
1bin/Tftp.Net.dll
windows10-2004-x64
1bin/UsbDll.dll
windows10-2004-x64
3bin/Utilit...te.dll
windows10-2004-x64
3bin/Utilit...r2.exe
windows10-2004-x64
3bin/Utilit....0.exe
windows10-2004-x64
3bin/WpfCon...ry.dll
windows10-2004-x64
1bin/Xceed....it.dll
windows10-2004-x64
1bin/bose_d...ib.exe
windows10-2004-x64
3bin/cab32.dll
windows10-2004-x64
3Analysis
- max time kernel
298s - max time network
245s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/07/2026, 14:20
Static task
static1
Behavioral task
behavioral1
Sample
ControlSpace Designer 5.15.4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/registry.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
DanteServices.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
VC_redist.x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
bin/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
bin/CC64Programmer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
bin/CC64UpdateUtility.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
bin/CSDesigner.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
bin/CSupdate.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
bin/CalcEQResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
bin/CalcEspResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
bin/CalcEspfResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
bin/CalcEspiResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
bin/DotNetMagic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
bin/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
bin/Northwoods.Go.Layout.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
bin/Northwoods.Go.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
bin/PSXServiceLauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
bin/System.Windows.Interactivity.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bin/Tftp.Net.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
bin/UsbDll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
bin/Utilities/CC-xD/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
bin/Utilities/CC-xD/fw-updater2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
bin/Utilities/EX-UH/UpgradeFirmware-1.0.30.0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
bin/WpfControlLibrary.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
bin/Xceed.Wpf.Toolkit.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
bin/bose_dante_lib.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
bin/cab32.dll
Resource
win10v2004-20260513-en
General
- Target bin/CC64UpdateUtility.exe
- Size 276KB
- Sample260707-rntphsbw21
- SHA256 d1581faace112c665fbba90eea5b019cbee4175d0c28f59d4b5de57a5e9d6a8f
- MD5 385c968cac2a3fdb0f0e8821875001ec
- SHA1 91b576f477fee5d2b73430465dae388808b849e7
- SHA512 bd118c1dfa3463a4fd7b87a596347617fd59b63818a40717e2c5e9c4750921d9941254fcf34f4beb4d7a32462d4db0b57970cee19ba3690d00caa4fded6a2b98
- SSDEEP 6144:Re5gYEH+k7ReFQ9LN1clI/q3YEPKDtIY:ReqYEHtZ96I/bEPe
- TLSH T1D2543A5172D18072D2D3197028A9B7642276FE9A5BE7F2836358BB0D7F386E00F2563D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CC64UpdateUtility.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4768 CC64UpdateUtility.exe 4768 CC64UpdateUtility.exe 4768 CC64UpdateUtility.exe