Overview
overview
8Static
static
3ControlSpa....4.exe
windows10-2004-x64
8$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3DanteServices.exe
windows10-2004-x64
7VC_redist.x86.exe
windows10-2004-x64
4bin/CC-xD_update.dll
windows10-2004-x64
3bin/CC64Pr...er.exe
windows10-2004-x64
3bin/CC64Up...ty.exe
windows10-2004-x64
3bin/CSDesigner.exe
windows10-2004-x64
5bin/CSupdate.exe
windows10-2004-x64
3bin/CalcEQ...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/DotNetMagic.dll
windows10-2004-x64
1bin/Newton...on.dll
windows10-2004-x64
1bin/Northw...ut.dll
windows10-2004-x64
1bin/Northwoods.Go.dll
windows10-2004-x64
1bin/PSXSer...er.exe
windows10-2004-x64
3bin/System...ty.dll
windows10-2004-x64
1bin/Tftp.Net.dll
windows10-2004-x64
1bin/UsbDll.dll
windows10-2004-x64
3bin/Utilit...te.dll
windows10-2004-x64
3bin/Utilit...r2.exe
windows10-2004-x64
3bin/Utilit....0.exe
windows10-2004-x64
3bin/WpfCon...ry.dll
windows10-2004-x64
1bin/Xceed....it.dll
windows10-2004-x64
1bin/bose_d...ib.exe
windows10-2004-x64
3bin/cab32.dll
windows10-2004-x64
3Analysis
- max time kernel
298s - max time network
269s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/07/2026, 14:20
Static task
static1
Behavioral task
behavioral1
Sample
ControlSpace Designer 5.15.4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/registry.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
DanteServices.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
VC_redist.x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
bin/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
bin/CC64Programmer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
bin/CC64UpdateUtility.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
bin/CSDesigner.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
bin/CSupdate.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
bin/CalcEQResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
bin/CalcEspResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
bin/CalcEspfResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
bin/CalcEspiResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
bin/DotNetMagic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
bin/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
bin/Northwoods.Go.Layout.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
bin/Northwoods.Go.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
bin/PSXServiceLauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
bin/System.Windows.Interactivity.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bin/Tftp.Net.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
bin/UsbDll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
bin/Utilities/CC-xD/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
bin/Utilities/CC-xD/fw-updater2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
bin/Utilities/EX-UH/UpgradeFirmware-1.0.30.0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
bin/WpfControlLibrary.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
bin/Xceed.Wpf.Toolkit.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
bin/bose_dante_lib.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
bin/cab32.dll
Resource
win10v2004-20260513-en
General
- Target bin/CSupdate.exe
- Size 2.0MB
- Sample260707-rntphsbw21
- SHA256 ff4d935e91acd0effc60552242191ba447f99deae38fd57d32ebc7146e7b282c
- MD5 b6de41427d4548a941b7915bcf10c4ba
- SHA1 10c60882da90351941f188fc3178f87260810589
- SHA512 0221dc54090ed857e39d8f0198d16edc64e93281758124c23a9b746e23c83a514b29ce2dcf60ccb9489c71fa9b537f56035945e0cc1f207696253750381a37cb
- SSDEEP 49152:fOXJONA7HHmenmERHgxgBrJVdqeCVq5W8q0JqyyiPZZn4AQZkwy:fOXJOi7HHmomigxgVJVdqeCVq5W8q0J9
- TLSH T198A55B217B73E0B3C12302B48918F379B1AD66AC873541C73694FA1D3976D82953FE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CSupdate.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4088 CSupdate.exe 4088 CSupdate.exe