Overview

overview

8

Static

static

造梦西�...��.url

windows7-x64

1

造梦西�...��.url

windows10-2004-x64

1

造梦西�....1.exe

windows7-x64

8

造梦西�....1.exe

windows10-2004-x64

8

造梦西�...��.url

windows7-x64

1

造梦西�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e10c58aee88cdefff040367284a50391fe04879dd1bcfc6c0d35987e1ba895c

  • Size

    1.3MB

  • Sample

    221125-12v9yaad58

  • MD5

    2add99dac902b084b769d83576fcac24

  • SHA1

    82748afad85bf05b8915fac21e1dbb6e627ac435

  • SHA256

    4e10c58aee88cdefff040367284a50391fe04879dd1bcfc6c0d35987e1ba895c

  • SHA512

    52aab5374ecf405e2cc4e065f8611d115962007f778a755f36ba0238d37e49dc84393de1651c0788561fd6a293bdc0c62bebff7a2987328a9693537528be23d4

  • SSDEEP

    24576:Kw3BboPxvFZq72hOxW7anFKH9q+APfMUjk50jdIpLlDNcw06kwXi/wEC88PYzPqd:KwuP5+jMq3jaow79XMwEdZq/bNH

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      造梦西游3死神辅助 1 1绿色版/更多软件下载.url

    • Size

      204B

    • MD5

      94e540428ac8f3545fec78c2b3dd8c0e

    • SHA1

      cd46c366b68af03fc8fa4fa097f9815d43e4c2e8

    • SHA256

      357214eb50712a5c8663ef263c458cb4ebbbc27e64d73ab5e32c82f60a7b80c8

    • SHA512

      3c7876c3a18e1ba98329392ac1b940c479552b361386ce3776622ae557e4d3d8cee045d162a614a302a603cb4615024258703e0652f41541e043fcf7ecdff539

    Score
    1/10
    behavioral1behavioral2

    • Target

      造梦西游3死神辅助 1 1绿色版/造梦西游3死神辅助1.1.exe

    • Size

      2.7MB

    • MD5

      5d1bd24c0db63dcfb5e3c3e883e43a7c

    • SHA1

      1b15c35a884603ad6ec27bcba3f40a63964b5c75

    • SHA256

      9cb805b6b3ac0831a36f89a745d1215a8e29c5113daaf5213ab9d1733d8278c2

    • SHA512

      fec59f8703399fde2a57b3b955f36ab98383a856280f229cd058fa8d4b7bb20df8cd4a85fdfa7502a27a0d7b83a203e4e2335fab0f8c23dcf08547ef5a5f6c44

    • SSDEEP

      49152:Cfleq3epnQU8HBTrRD+s8KuqGaX0ToIBAUZLYI:y0ppQUayJBAUZLP

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral3behavioral4

    • Target

      造梦西游3死神辅助 1 1绿色版/飘荡软件.url

    • Size

      320B

    • MD5

      c404bacb30424b525bf6dfcab807f461

    • SHA1

      4fdc923fbbeafcb4ee150f4f82597ae72d1f4df6

    • SHA256

      8dc8673d85feb2d358e80a498ca7e649b46b8af119ebaf32126099df3cc5fea3

    • SHA512

      48b370b8a2a81ae5f3f57752b06f119b8bea0efc19b2ccf31683b5a9456ece68200ee2fb7826bc24c598311be925829be8084e1535f61330d8b91ba4b8d5f74a

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v6

Tasks