Technical Information
Malicious functions
Executes the following
- '%WINDIR%\syswow64\taskkill.exe' /IM "DGTControl.exe" /F /T
- '%WINDIR%\syswow64\taskkill.exe' /IM "Lewitt Control Center.exe" /F /T
- '%WINDIR%\syswow64\taskkill.exe' /IM "Lewitt Control Center 2.2.exe" /F /T
- '%WINDIR%\syswow64\taskkill.exe' /IM "Lewitt Control Center 2.3.exe" /F /T
Modifies file system
Creates the following files
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\lewitt.ico
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstream.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtdevices.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgt650.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgt450.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgt260.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\zh-cn\lewitt control center.resources.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\stream4x5.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\lewitt control center.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\lewitt control center 2.2.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\en-us\lewitt control center.resources.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstream_mixer_ducker.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstreamks.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstreamasio_x64.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstreamasio.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstreamapi_x64.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstreamapi.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstream.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtdevices.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgt650.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgt450.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgt260.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\zh-cn\lewitt control center.resources.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\stream4x5.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstreamapi.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstreamks.sys
- %TEMP%\nsy87f6.tmp\signcheck.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstream_mixer_ducker.sys
- %TEMP%\nsi87e5.tmp\md5dll.dll
- %TEMP%\nsi87e5.tmp\registry.dll
- %TEMP%\nsi87e5.tmp\ioconfirmpagetusbaudio_x64.ini
- %TEMP%\nsi87e5.tmp\ioconfirmpagetusbaudio_x86.ini
- %TEMP%\nsi87e5.tmp\iofinishpage.ini
- %TEMP%\nsi87e5.tmp\iowelcomepage.ini
- %TEMP%\nsi87e5.tmp\default.ini
- %TEMP%\nsi87e5.tmp\setup.bmp
- %TEMP%\nsi87e5.tmp\modern-wizard.bmp
- %TEMP%\nsi87e5.tmp\iospecial.ini
- %TEMP%\nsy87f6.tmp\nst8b35.tmp
- %TEMP%\nsi87e5.tmp\nsexec.dll
- %TEMP%\nsy87f6.tmp\nsy8846.tmp
- %TEMP%\nsy87f6.tmp\nsn8856.tmp
- %TEMP%\nsy87f6.tmp\nsn8856.cfg
- %TEMP%\nsy87f6.tmp\nsy8845.tmp
- %TEMP%\tusbaudio_setup.log
- %TEMP%\nsi87e5.tmp\system.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\zh-cn\lewitt control center.resources.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\stream4x5.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\lewitt control center.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\lewitt control center 2.2.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\en-us\lewitt control center.resources.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\lewitt control center.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstreamasio.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\lewitt control center 2.2.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\presetup.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstreamks.cat
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstream.inf
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstream.cat
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\custom.ini
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstreamks.inf
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstreamks.cat
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstream.inf
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\dgtstream.cat
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x64\custom.ini
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstreamks.inf
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstreamks.cat
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstream.inf
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstream.cat
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\custom.ini
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstreamks.inf
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstreamks.cat
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstream.inf
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstream.cat
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\custom.ini
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\vendor.cer
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\setup.ini
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\setup.bmp
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\license_english.txt
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w7w8_x86\dgtstreamks.inf
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\setup.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstream_mixer_ducker.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgt260.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstreamks.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstreamasio.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstreamapi.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtstream.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgtdevices.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgt650.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgt450.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\dgt260.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\zh-cn\lewitt control center.resources.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\stream4x5.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\lewitt control center.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\lewitt control center 2.2.exe
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\en-us\lewitt control center.resources.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstream_mixer_ducker.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstreamks.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstreamasio_x64.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstreamasio.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstreamapi_x64.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstreamapi.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtstream.sys
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgtdevices.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgt650.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x64\dgt450.dll
- %TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\w10_x86\en-us\lewitt control center.resources.dll
- %TEMP%\nsi87e5.tmp\installoptions.dll
Miscellaneous
Searches for the following windows
- ClassName: '' WindowName: ''
- ClassName: '#32770' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
Creates and executes the following
- '%TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\presetup.exe'
- '%TEMP%\tlsfxce744c54\lewitt_dgt_stream_series_v2.3.0_2019-07-18\setup.exe'
- '%TEMP%\nsy87f6.tmp\nsy8845.tmp' "%TEMP%\nsy87F6.tmp\nsy8846.tmp" "%TEMP%\nsy87F6.tmp\nsy8846.tmp"
- '%TEMP%\nsy87f6.tmp\nsy8845.tmp' "%TEMP%\nsy87F6.tmp\nsy8846.tmp" "%TEMP%\nsy87F6.tmp\nsy8846.tmp"' (with hidden window)