Overview
overview
8Static
static
3ControlSpa....4.exe
windows10-2004-x64
8$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3DanteServices.exe
windows10-2004-x64
7VC_redist.x86.exe
windows10-2004-x64
4bin/CC-xD_update.dll
windows10-2004-x64
3bin/CC64Pr...er.exe
windows10-2004-x64
3bin/CC64Up...ty.exe
windows10-2004-x64
3bin/CSDesigner.exe
windows10-2004-x64
5bin/CSupdate.exe
windows10-2004-x64
3bin/CalcEQ...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/CalcEs...es.exe
windows10-2004-x64
3bin/DotNetMagic.dll
windows10-2004-x64
1bin/Newton...on.dll
windows10-2004-x64
1bin/Northw...ut.dll
windows10-2004-x64
1bin/Northwoods.Go.dll
windows10-2004-x64
1bin/PSXSer...er.exe
windows10-2004-x64
3bin/System...ty.dll
windows10-2004-x64
1bin/Tftp.Net.dll
windows10-2004-x64
1bin/UsbDll.dll
windows10-2004-x64
3bin/Utilit...te.dll
windows10-2004-x64
3bin/Utilit...r2.exe
windows10-2004-x64
3bin/Utilit....0.exe
windows10-2004-x64
3bin/WpfCon...ry.dll
windows10-2004-x64
1bin/Xceed....it.dll
windows10-2004-x64
1bin/bose_d...ib.exe
windows10-2004-x64
3bin/cab32.dll
windows10-2004-x64
3Analysis
- max time kernel
298s - max time network
289s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/07/2026, 14:20
Static task
static1
Behavioral task
behavioral1
Sample
ControlSpace Designer 5.15.4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/registry.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
DanteServices.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
VC_redist.x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
bin/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
bin/CC64Programmer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
bin/CC64UpdateUtility.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
bin/CSDesigner.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
bin/CSupdate.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
bin/CalcEQResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
bin/CalcEspResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
bin/CalcEspfResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
bin/CalcEspiResources.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
bin/DotNetMagic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
bin/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
bin/Northwoods.Go.Layout.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
bin/Northwoods.Go.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
bin/PSXServiceLauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
bin/System.Windows.Interactivity.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bin/Tftp.Net.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
bin/UsbDll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
bin/Utilities/CC-xD/CC-xD_update.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
bin/Utilities/CC-xD/fw-updater2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
bin/Utilities/EX-UH/UpgradeFirmware-1.0.30.0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
bin/WpfControlLibrary.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
bin/Xceed.Wpf.Toolkit.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
bin/bose_dante_lib.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
bin/cab32.dll
Resource
win10v2004-20260513-en
General
- Target bin/Utilities/EX-UH/UpgradeFirmware-1.0.30.0.exe
- Size 1.8MB
- Sample260707-rntphsbw21
- SHA256 e592e19c58075ee6221035595f3e4d443fafc8800a5b157bbd590b1e36848d9c
- MD5 cd75f727e5830a951e9eb916be841588
- SHA1 cc4d614058d5e2913453acbf273f72d95d70920a
- SHA512 94cacf65e3681ff26183f2626caa373b99002617e4dc4f325b1d43c07d7747d444f662c55d0f00936e1aade3a67d1e354c1395a8449b8949f2661d5768d884ad
- SSDEEP 49152:QH4q4+26u1JZQkZRCW+Qa2IdNtTHscmf1fH5BxIexGzIo7JjGUEtbwNt:vI26u18kHwQa2IdNtTHscmf5H/KzIo71
- TLSH T1FE858D2176D18076C5333530AA4DE379B6EEBE365BB4428727903F3D7A70493892876B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UpgradeFirmware-1.0.30.0.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1116 UpgradeFirmware-1.0.30.0.exe 1116 UpgradeFirmware-1.0.30.0.exe