Overview
overview
8Static
static
3ControlSpa....4.exe
windows10-2004-x64
8$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3DanteServices.exe
windows10-2004-x64
7VC_redist.x86.exe
windows10-2004-x64
4bin/CC-xD_update.dll
windows10-2004-x64
3bin/CC64Pr...er.exe
windows10-2004-x64
3bin/CC64Up...ty.exe
windows10-2004-x64
3bin/CSDesigner.exe
windows10-2004-x64
5bin/CSupdate.exe
windows10-2004-x64
3bin/CalcEQ...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/DotNetMagic.dll
windows10-2004-x64
1bin/Newton...on.dll
windows10-2004-x64
1bin/Northw...ut.dll
windows10-2004-x64
1bin/Northwoods.Go.dll
windows10-2004-x64
1bin/PSXSer...er.exe
windows10-2004-x64
3bin/System...ty.dll
windows10-2004-x64
1bin/Tftp.Net.dll
windows10-2004-x64
1bin/UsbDll.dll
windows10-2004-x64
3bin/Utilit...te.dll
windows10-2004-x64
3bin/Utilit...r2.exe
windows10-2004-x64
3bin/Utilit....0.exe
windows10-2004-x64
3bin/WpfCon...ry.dll
windows10-2004-x64
1bin/Xceed....it.dll
windows10-2004-x64
1bin/bose_d...ib.exe
windows10-2004-x64
3bin/cab32.dll
windows10-2004-x64
3Analysis
- max time kernel
298s - max time network
321s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/07/2026, 14:20
Static task
static1
Behavioral task
behavioral1
Sample
ControlSpace Designer 5.15.4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/registry.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
DanteServices.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
VC_redist.x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
bin/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
bin/CC64Programmer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
bin/CC64UpdateUtility.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
bin/CSDesigner.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
bin/CSupdate.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
bin/CalcEQResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
bin/CalcEspResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
bin/CalcEspfResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
bin/CalcEspiResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
bin/DotNetMagic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
bin/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
bin/Northwoods.Go.Layout.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
bin/Northwoods.Go.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
bin/PSXServiceLauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
bin/System.Windows.Interactivity.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bin/Tftp.Net.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
bin/UsbDll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
bin/Utilities/CC-xD/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
bin/Utilities/CC-xD/fw-updater2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
bin/Utilities/EX-UH/UpgradeFirmware-1.0.30.0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
bin/WpfControlLibrary.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
bin/Xceed.Wpf.Toolkit.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
bin/bose_dante_lib.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
bin/cab32.dll
Resource
win10v2004-20260513-en
General
- Target bin/CalcEQResources.exe
- Size 129KB
- Sample260707-rntphsbw21
- SHA256 8335b08121054cecf01a2837546ed5b3c3d500b165df02f9e7c9f0521cc7661f
- MD5 180e03713599ba057d3421d361a623a3
- SHA1 f85b48f87d0759560216fcb102742582f2effffd
- SHA512 4c633967662daf5d4df84c8a8b8ec68ffc656749a12dd1d439b296a696726b84d4c30293378fd27fe4882fbc7cd6186c129cda9dcb7df167d03576b1428cfc7e
- SSDEEP 3072:KGK58FBHbskyKh1GF/pstBaDqwONnct437Bl3N2UtE:NFlxh1GF/p/uwONct43j92U
- TLSH T124D3AF1373418835D94001700C78BFB2456FE9699F684ADBB7801E6F6D616D3AE32EEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CalcEQResources.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4136 CalcEQResources.exe