Overview

overview

7

Static

static

3

SURVEY_PRO...SH.exe

windows10-2004-x64

7

SURVEY_PRO...SH.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$TEMP/vcre...15.exe

windows10-2004-x64

4

$TEMP/vcre...15.exe

windows11-ltsc_2024-x64

4

DELTARUNE.exe

windows10-2004-x64

6

DELTARUNE.exe

windows11-ltsc_2024-x64

6

mus/hip_shop.ps1

windows10-2004-x64

3

mus/hip_shop.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    SURVEY_PROGRAM_WINDOWS_ENGLISH.exe
  • Size 77.2MB
  • Sample260804-1smlfayyaw
  • SHA256 5e5814b0a13cb1f9e850c45202309c1079dc1f43ab8a25537383c4810dc37308
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutioninstaller

Malware Config

Targets

    • Target
      SURVEY_PROGRAM_WINDOWS_ENGLISH.exe
    • Size 77.2MB
    • SHA256 5e5814b0a13cb1f9e850c45202309c1079dc1f43ab8a25537383c4810dc37308
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $TEMP/vcredist_x86_2015.exe
    • Size 13.1MB
    • SHA256 fdd1e1f0dcae2d0aa0720895eff33b927d13076e64464bb7c7e5843b7667cd14
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral7behavioral8
    • Target
      DELTARUNE.exe
    • Size 4.7MB
    • SHA256 ecdfdbe82490ceeb7b312e7858bae8addd188a50d16c20fe3c7ca05819674007
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery
    behavioral10behavioral9
    • Target
      mus/hip_shop.ogg
    • Size 942KB
    • SHA256 62acd3d2de7e4ad81e99a2b31e40b90b1b121d93fc0c79ec724a7f1a47892a66
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks