Overview

overview

8

Static

static

Process La...er.exe

windows7-x64

1

Process La...er.exe

windows10-2004-x64

1

Process La...ts.exe

windows7-x64

1

Process La...ts.exe

windows10-2004-x64

1

Process La...er.exe

windows7-x64

1

Process La...er.exe

windows10-2004-x64

1

Process La...er.exe

windows7-x64

1

Process La...er.exe

windows10-2004-x64

1

Process La...or.exe

windows7-x64

1

Process La...or.exe

windows10-2004-x64

1

Process La...so.exe

windows7-x64

3

Process La...so.exe

windows10-2004-x64

3

Process La...er.exe

windows7-x64

3

Process La...er.exe

windows10-2004-x64

7

Process La...de.exe

windows7-x64

8

Process La...de.exe

windows10-2004-x64

8

Process La...er.exe

windows7-x64

1

Process La...er.exe

windows10-2004-x64

1

Process La...er.exe

windows7-x64

1

Process La...er.exe

windows10-2004-x64

1

Process La...ms.exe

windows7-x64

1

Process La...ms.exe

windows10-2004-x64

1

Process La...nt.exe

windows7-x64

1

Process La...nt.exe

windows10-2004-x64

1

Process La...pl.cmd

windows7-x64

8

Process La...pl.cmd

windows10-2004-x64

8

Process La...an.dll

windows7-x64

1

Process La...an.dll

windows10-2004-x64

1

Process La...se.dll

windows7-x64

1

Process La...se.dll

windows10-2004-x64

1

Process La...al.dll

windows7-x64

1

Process La...al.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0df79ebcde62d0bd90cc22aacd642fef46c183fefae28de4a9e3a1c969b89c18

  • Size

    3.1MB

  • MD5

    46484fd8f25ebf167f0aa71d04522372

  • SHA1

    335f6e15837487b8849bbeec7148c26b5b41903e

  • SHA256

    0df79ebcde62d0bd90cc22aacd642fef46c183fefae28de4a9e3a1c969b89c18

  • SHA512

    9548fd572a3e6cb18f24c794e835eb35862cc751b51d7301963dedb5021f899fa866d032ea638c8797b42860c20d70202ba39356f024eb11c38e6e6ea98996f0

  • SSDEEP

    98304:4YFPx7HPt88Fb+h2sxKorSCfiM0hp/FBX4Uv0X:z7l8Cm55h0hp/j4Uvc

Score
N/A

Malware Config

Signatures

Files

  • 0df79ebcde62d0bd90cc22aacd642fef46c183fefae28de4a9e3a1c969b89c18
    .7z
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/AppInfo/AppIcon.ico
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/AppInfo/AppInfo.ini
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/AppInfo/Launcher/Custom.nsh
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/AppInfo/Launcher/ProcessLassoPortable.ini
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/CPUEater.exe
    .exe windows x86

    80308c5cfc4474b922631276109150eb


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/Insights.exe
    .exe windows x86

    d56678f51e2478694441b7f9ebc8c44f


    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/InstallHelper.exe
    .exe windows x86

    606b391ab46c2fc1cf767601304667e1


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/LogViewer.exe
    .exe windows x86

    2143adcfb461a9ee28813a105cf4aa7e


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/ProcessGovernor.exe
    .exe windows x86

    6fbb8f86bd1cb0aabb7cb52965999e80


    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/ProcessLasso.exe
    .exe windows x86

    a28c60452d738c19a5f55f6c5878120f


    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/ProcessLassoLauncher.exe
    .exe windows x86

    20cdb10030052683a04268d1a1086552


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/QuickUpgrade.exe
    .exe windows x86

    affc9fd4d20986b54010f4efa3a9344b


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/ThreadRacer.exe
    .exe windows x86

    5ab9d381bd1a027477264b1732073d1a


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/TweakScheduler.exe
    .exe windows x86

    34c1b957816a9747187112350ae33392


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/bitsumms.exe
    .exe windows x86

    0433d859cc009a3cfb94e0820dd46678


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/bitsumsessionagent.exe
    .exe windows x86

    23214fb5c3db29fc542af17755397bff


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl.cmd
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_bulgarian.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_chinese.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_chinese_traditional.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_english.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_finnish.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_french.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_german.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_italian.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_japanese.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_korean.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_polish.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_ptbr.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_russian.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_slovenian.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/pl_rsrc_spanish.dll
    .dll windows x86


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/srvstub.exe
    .exe windows x86

    cbf0f574244e9b6e3ab6ab8fa56a0d04


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/start-governor.bat
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/stop-governor.bat
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/testlasso.exe
    .exe windows x86

    0530150f864630a5c67e3d3209375725


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/vistammsc.exe
    .exe windows x86

    7bd5fdab32d55646461f8aa2cc586436


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/CPUEater.exe
    .exe windows x64

    5449370e25c254a53f1786c41929f7e8


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/Insights.exe
    .exe windows x64

    30be0e67c8012cbd67108a70412d27ba


    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/InstallHelper.exe
    .exe windows x64

    7b0595b3cd8b395e52c02b983c94610a


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/LogViewer.exe
    .exe windows x64

    49d8d6ffd9ec6e407be4e7a9ac22e7b7


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/ProcessGovernor.exe
    .exe windows x64

    7b3a69fe3e5d25f08b47af424e477e2a


    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/ProcessLasso.exe
    .exe windows x64

    2211a0708aa8c2b28f4d74b568d5b42d


    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/ProcessLassoLauncher.exe
    .exe windows x64

    22d60a055b72ae9b5535cfec02740a48


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/QuickUpgrade.exe
    .exe windows x64

    e74a68750e016626eb19ae11522a4834


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/ThreadRacer.exe
    .exe windows x64

    6ce685c058c67b6f75c16bbc30979c2e


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/TweakScheduler.exe
    .exe windows x64

    b3a45656b6d99520a884aa22958185b6


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/bitsumms.exe
    .exe windows x64

    f6826525140bf1334ecc29bc1381e417


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/bitsumsessionagent.exe
    .exe windows x64

    d6540eb90daa6c991a298637e0310c86


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl.cmd
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_bulgarian.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_chinese.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_chinese_traditional.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_english.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_finnish.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_french.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_german.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_italian.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_japanese.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_korean.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_polish.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_ptbr.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_russian.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_slovenian.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/pl_rsrc_spanish.dll
    .dll windows x64


    Code Sign

    Headers

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/srvstub.exe
    .exe windows x64

    3fca3405ff87c955abb029902dcec962


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/start-governor.bat
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/stop-governor.bat
  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/testlasso.exe
    .exe windows x64

    7228f948b0c6127eb44588ec19fa4057


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso64/vistammsc.exe
    .exe windows x64

    0e13f7ea80b3b7802558f8a51259dd7a


    Code Sign

    Headers

    Imports

    Sections

  • Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/ProcessLassoPortable.exe
    .exe windows x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections