Overview
overview
8Static
static
新建文....bat
windows7-x64
8新建文....bat
windows10-2004-x64
8新建文....bat
windows7-x64
8新建文....bat
windows10-2004-x64
8新建文...64.dll
windows7-x64
3新建文...64.dll
windows10-2004-x64
3新建文...ll.dll
windows7-x64
1新建文...ll.dll
windows10-2004-x64
1新建文...64.dll
windows7-x64
1新建文...64.dll
windows10-2004-x64
1新建文...CC.dll
windows7-x64
1新建文...CC.dll
windows10-2004-x64
1新建文...64.dll
windows7-x64
1新建文...64.dll
windows10-2004-x64
1新建文...64.exe
windows7-x64
1新建文...64.exe
windows10-2004-x64
1新建文...on.dll
windows7-x64
1新建文...on.dll
windows10-2004-x64
1新建文...64.dll
windows7-x64
1新建文...64.dll
windows10-2004-x64
1新建文...xt.dll
windows7-x64
1新建文...xt.dll
windows10-2004-x64
1新建文...64.dll
windows7-x64
8新建文...64.dll
windows10-2004-x64
8新建文...rs.dll
windows7-x64
3新建文...rs.dll
windows10-2004-x64
3新建文...64.dll
windows7-x64
1新建文...64.dll
windows10-2004-x64
3新建文...xt.vbs
windows7-x64
1新建文...xt.vbs
windows10-2004-x64
1新建文...ll.vbs
windows7-x64
1新建文...ll.vbs
windows10-2004-x64
1Analysis
-
max time kernel
16s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
13-10-2022 05:33
Static task
static1
Behavioral task
behavioral1
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/!卸载.bat
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/!卸载.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/!绿化.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/!绿化.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMFType64.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMFType64.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMGetAll.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMGetAll.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMGetAll64.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMGetAll64.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIECC.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIECC.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIECC64.dll
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIECC64.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIntegrator64.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIntegrator64.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMNetMon.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMNetMon.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMNetMon64.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMNetMon64.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMShellExt.dll
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMShellExt.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMShellExt64.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMShellExt64.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMVMPrs.dll
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMVMPrs.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMVMPrs64.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMVMPrs64.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEExt.vbs
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEExt.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEGetAll.vbs
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEGetAll.vbs
Resource
win10v2004-20220812-en
General
-
Target
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMShellExt64.dll
-
Size
34KB
-
MD5
555f97044de456b918b32fe684e40d78
-
SHA1
0cb97d7a8751af62e4121d312e72a25689749e5d
-
SHA256
09d4481d59eaef978b946fd4a9d8f53e51aed176ef629ed26e26d9a306e44d4b
-
SHA512
0ba231e4529455aac6c8b3de93e17299835a75f07133df8fe97de8db67676d2e0638973050fcfe9064078a40db0e422385e5d65c7260470fe558dc9f04471a8c
-
SSDEEP
384:+whsSCSf1YFnrWfJ9J9YNiaD2nYPLWSUHeMQgPHOULkyw8JN77hhh6:+knYFyfJ5YjKjbPHmQ3hD6
Malware Config
Signatures
-
Registers COM server for autorun 1 TTPs 3 IoCs
Processes:
regsvr32.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}\InProcServer32 regsvr32.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}\InProcServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\新建文件夹\\Inet_Download_Manager_v6.37.14_Final\\Internet Download Manager\\IDMShellExt64.dll" regsvr32.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}\InProcServer32\ThreadingModel = "Apartment" regsvr32.exe -
Modifies registry class 5 IoCs
Processes:
regsvr32.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}\ = "IDM Shell Extension" regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}\InProcServer32 regsvr32.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}\InProcServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\新建文件夹\\Inet_Download_Manager_v6.37.14_Final\\Internet Download Manager\\IDMShellExt64.dll" regsvr32.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}\InProcServer32\ThreadingModel = "Apartment" regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D} regsvr32.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1940-54-0x000007FEFBD81000-0x000007FEFBD83000-memory.dmpFilesize
8KB