Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 05:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ColorBug.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ColorBug.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target ColorBug.exe
- Size 53KB
- Sample260930-gbdgnafg95
- SHA256 775ba68597507cf3c24663f5016d257446abeb66627f20f8f832c0860cad84de
- MD5 6536b10e5a713803d034c607d2de19e3
- SHA1 a6000c05f565a36d2250bdab2ce78f505ca624b7
- SHA512 61727cf0b150aad6965b4f118f33fd43600fb23dde5f0a3e780cc9998dfcc038b7542bfae9043ce28fb08d613c2a91ff9166f28a2a449d0e3253adc2cb110018
- SSDEEP 1536:ynqAKryDLrASOcRw52sjzIUK7RkYrJ2lrKX:SNdMT8Z8cX
- TLSH T117333B63F2D08471E173DEBC9C3A8214992BFE312D34944A7BB52E8D0E793949C1A797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\~~CB = "cb.exe" ColorBug.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ColorBug.exe - Modifies Control Panel 21 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\Hilight = "168 115 229" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\ButtonText = "56 156 244" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\InactiveBorder = "254 117 235" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\ButtonShadow = "212 0 62" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\GrayText = "176 80 116" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\Menu = "98 138 24" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\Window = "26 138 37" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\WindowText = "71 121 114" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\TitleText = "85 61 55" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\ButtonFace = "69 8 1" ColorBug.exe Key created \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\Scrollbar = "239 153 94" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\Background = "119 240 143" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\MenuText = "118 168 214" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\ActiveBorder = "231 139 5" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\HilightText = "204 68 114" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\InactiveTitleText = "159 31 139" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\ActiveTitle = "113 20 129" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\InactiveTitle = "160 43 24" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\WindowFrame = "44 110 62" ColorBug.exe Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Control Panel\Colors\AppWorkspace = "251 227 147" ColorBug.exe