Overview
overview
8Static
static
8rxbaoV3.29...ew.dll
windows7-x64
1rxbaoV3.29...ew.dll
windows10-2004-x64
1rxbaoV3.29...me.dll
windows7-x64
1rxbaoV3.29...me.dll
windows10-2004-x64
1rxbaoV3.29_Y/NPC.dll
windows7-x64
1rxbaoV3.29_Y/NPC.dll
windows10-2004-x64
1rxbaoV3.29...er.exe
windows7-x64
1rxbaoV3.29...er.exe
windows10-2004-x64
1rxbaoV3.29_Y/bb.dll
windows7-x64
3rxbaoV3.29_Y/bb.dll
windows10-2004-x64
3rxbaoV3.29_Y/iext.dll
windows7-x64
1rxbaoV3.29_Y/iext.dll
windows10-2004-x64
1rxbaoV3.29...ms.dll
windows7-x64
1rxbaoV3.29...ms.dll
windows10-2004-x64
1rxbaoV3.29..._Y.exe
windows7-x64
8rxbaoV3.29..._Y.exe
windows10-2004-x64
8rxbaoV3.29_Y/rxbb.dll
windows7-x64
1rxbaoV3.29_Y/rxbb.dll
windows10-2004-x64
rxbaoV3.29...bb.dll
windows7-x64
1rxbaoV3.29...bb.dll
windows10-2004-x64
1rxbaoV3.29_Y/temp.exe
windows7-x64
1rxbaoV3.29_Y/temp.exe
windows10-2004-x64
1rxbaoV3.29...ib.dll
windows7-x64
1rxbaoV3.29...ib.dll
windows10-2004-x64
1rxbaoV3.29...pi.dll
windows7-x64
3rxbaoV3.29...pi.dll
windows10-2004-x64
3rxbaoV3.29...��.exe
windows7-x64
1rxbaoV3.29...��.exe
windows10-2004-x64
1rxbaoV3.29...��.exe
windows7-x64
1rxbaoV3.29...��.exe
windows10-2004-x64
1第七下载.url
windows7-x64
1第七下载.url
windows10-2004-x64
1Analysis
-
max time kernel
96s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
24-11-2022 22:24
Behavioral task
behavioral1
Sample
rxbaoV3.29_Y/HtmlView.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
rxbaoV3.29_Y/HtmlView.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
rxbaoV3.29_Y/ItemName.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
rxbaoV3.29_Y/ItemName.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
rxbaoV3.29_Y/NPC.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
rxbaoV3.29_Y/NPC.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
rxbaoV3.29_Y/Updater.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
rxbaoV3.29_Y/Updater.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
rxbaoV3.29_Y/bb.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
rxbaoV3.29_Y/bb.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
rxbaoV3.29_Y/iext.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
rxbaoV3.29_Y/iext.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
rxbaoV3.29_Y/ntems.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
rxbaoV3.29_Y/ntems.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
rxbaoV3.29_Y/rxbaoV3.29_Y.exe
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
rxbaoV3.29_Y/rxbaoV3.29_Y.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
rxbaoV3.29_Y/rxbb.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
rxbaoV3.29_Y/rxbb.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
rxbaoV3.29_Y/rxdbb.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
rxbaoV3.29_Y/rxdbb.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
rxbaoV3.29_Y/temp.exe
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
rxbaoV3.29_Y/temp.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
rxbaoV3.29_Y/xplib.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
rxbaoV3.29_Y/xplib.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
rxbaoV3.29_Y/zlibwapi.dll
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
rxbaoV3.29_Y/zlibwapi.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
rxbaoV3.29_Y/查线.exe
Resource
win7-20220901-en
Behavioral task
behavioral28
Sample
rxbaoV3.29_Y/查线.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
rxbaoV3.29_Y/热血宝宝.exe
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
rxbaoV3.29_Y/热血宝宝.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
第七下载.url
Resource
win7-20220901-en
Behavioral task
behavioral32
Sample
第七下载.url
Resource
win10v2004-20221111-en
General
-
Target
rxbaoV3.29_Y/Updater.exe
-
Size
20KB
-
MD5
6128afe828136935963bd4c50cb2d2d9
-
SHA1
5419540d3060398c13b5913825f31951e5a9e9cc
-
SHA256
9342dd6979bc829e21f3689866ba928a19a73a30a16317a6334acf0fe91ba4aa
-
SHA512
acbbe760e960fd41068056a20cc301791fa3dc4e4a9aa7b2f0a3e7405859ebdc908e046db9c93eaeb39a2bff677513b5ec8eaf7a98f5cf902fba1e1b2d220f59
-
SSDEEP
384:Xqh+1RjnJviUXlxHgyXVXtfwMw7QPSYOz1+hETv6AkZVfXmmsnDNBTmYYjZL7xOC:OiRR1xHjl9fwMw7QKYOYETyAOVf2msno
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes:
Updater.exepid process 1108 Updater.exe 1108 Updater.exe 1108 Updater.exe 1108 Updater.exe 1108 Updater.exe