Overview
overview
10Static
static
10CommonPlugin.dll
windows7-x64
3CommonPlugin.dll
windows10-2004-x64
3GamePlugin.dll
windows7-x64
3GamePlugin.dll
windows10-2004-x64
3PCM硬件�....0.exe
windows7-x64
1PCM硬件�....0.exe
windows10-2004-x64
1VoiceModeO...LL.dll
windows7-x64
1VoiceModeO...LL.dll
windows10-2004-x64
1WrapPlugin.dll
windows7-x64
3WrapPlugin.dll
windows10-2004-x64
3General
-
Target
9239931f6208be5b6e934b6aad575952f28cf90eb8887d9c09c8014f374c0619
-
Size
4.0MB
-
Sample
220902-d5lhksfegp
-
MD5
a429ca279ab06a2e21c77ada2a79ff3e
-
SHA1
a1c23e183b2c43ddcb3ce0ed44a5477834616ef2
-
SHA256
9239931f6208be5b6e934b6aad575952f28cf90eb8887d9c09c8014f374c0619
-
SHA512
d98a0f4ba08af5e588837b13dd285a2fa0eb929b0be000e003a9b0d62e6da12cdc18b3c4c010437ffdd42a370d0456a78d39b76f39131a6d1fe259c773ee57ed
-
SSDEEP
98304:+f1cs1yLtb7BjPG5Yi1N6kZc462W8i5T6UUpdcs:+db1yLR71G51ZDW552/pdL
Behavioral task
behavioral1
Sample
CommonPlugin.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
CommonPlugin.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
GamePlugin.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
GamePlugin.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
PCM硬件能力判断工具v1.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
PCM硬件能力判断工具v1.0.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
VoiceModeOfOnlineClassDLL.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
VoiceModeOfOnlineClassDLL.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
WrapPlugin.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
WrapPlugin.dll
Resource
win10v2004-20220901-en
Malware Config
Extracted
joker
https://pcsd-pcmgr-ldc.oss-cn-beijing.aliyuncs.com
Targets
-
-
Target
CommonPlugin.dll
-
Size
3.6MB
-
MD5
f028b00039daea93d4fd55e7371cdd92
-
SHA1
720ba4c4965ebb75d8ca0b9e7f899772379d93ba
-
SHA256
9cf6ea864be27300788003e51e92284744f2e38a0c495171e0c66a45925f32bb
-
SHA512
fefd380ed2f36a002448f9ea39c3cca760a5ea77e534f764f0d53135e9d978d872327708450c51bc685f4d0dee8b0186999fc5c50b3ff33c9147d4d27eaafe5d
-
SSDEEP
49152:j5JfcM115Va5KFHLOsQAj3vSRCxMCOIy06qgxGKliophahsP+9zCVAxqukedT35Y:dJfcM1Fa5EHLOsQAToCeGKMUo2hez
Score3/10 -
-
-
Target
GamePlugin.dll
-
Size
2.9MB
-
MD5
651a491c8a0e82f8f9c445de25d94ea7
-
SHA1
da9c800e0b59a0b2065caad718d99156692c1cb1
-
SHA256
909d7e8d7764e3cf8864e167589dcccaac24fa51a1104d5cd698c4a861e251c5
-
SHA512
425a49b39a4aa09fa55781dfda5e3406cddf80c765c8d3dd1f76b180d269d70d33fe6dd6d1000964cd484d69d7dcf4f979f84e7b702bfcc3c9cf53751086a1d3
-
SSDEEP
49152:OBLGnxELQe7Bb5vZ3mfGsiWlE5TtIMdKoh+P8zyDLL2DA+X5f2Braj1Lnt:wLGmLVmM4waiR
Score3/10 -
-
-
Target
PCM硬件能力判断工具v1.0.exe
-
Size
30KB
-
MD5
4817bee2bab58459ecc64ef3beef681d
-
SHA1
be048fd958a21d4367767dce9203b26ec68b45c4
-
SHA256
97a54a7b90c7fb6bd255f6fb9c2ddadccc553b0afa98c8bb8f65a89140efbf21
-
SHA512
bd8ae12fc8aaaeb8fab4029c0b14cd69374ff0eecd5546538861099e16348143899463229737b10d1e1494115081702df21a4ab4b70c2a3ab30e513e17d3d2a5
-
SSDEEP
768:ouVGFhXHyonqn1vAAAbT1ayMfFZNx1V+JCTwYcEH5:8DXHyYqn1MbT1ayMtZNxXpb5
Score1/10 -
-
-
Target
VoiceModeOfOnlineClassDLL.dll
-
Size
275KB
-
MD5
082390fdb977a269ae9c0734c103eab7
-
SHA1
adf0c8b4c6c2d55863c54cfd5b09e7ffa9c017c6
-
SHA256
a2a025d5d29f9dc6dba5128970ceef7a56db2fb2dd941b07687ef26e38c7754e
-
SHA512
a53da74ef44d3e39d78a47ad39bc14857f0aa68d8dc6151d30899baa36b813b8714cce275a714b28c33b432366c56f01472c5cf37d1197a3b4f4c5ff70a06591
-
SSDEEP
6144:2NU2HYShobbOm9wV4gjosd1VgK2YVRBblj9eVkpTzb6D9O5pFHWlxssVa4r3V:X2HH4Sm9vgRTF2Sb197bcO5XHklVR
Score1/10 -
-
-
Target
WrapPlugin.dll
-
Size
3.7MB
-
MD5
c034f07588f318bf683796d93c2e0203
-
SHA1
61474f44dfb11c5e2a46abaad107d7baccfb9f8b
-
SHA256
79683ffdf56b33a267770fbf02ed363bf37d4e36020506117adc27e0cfb2e81f
-
SHA512
5e29966ff229a650d97266e736ff065cbf3a9dc123fd66c73238c0b1ebdd110411797939492a814d0d6509efdb6b136d51bddc439a2f917ec93139e78b8f8f87
-
SSDEEP
49152:GJlh/hxLKXUM/drnJay8wfnfch1gbla5XzHeWY6olydYbMpPSzNGvYpgMP1Mz2K0:QlhHSdrnJaNqJavkd
Score3/10 -