Overview

overview

9

Static

static

9

雷霆之�...ad.dll

windows7-x64

1

雷霆之�...ad.dll

windows10-2004-x64

1

雷霆之�...EL.dll

windows7-x64

8

雷霆之�...EL.dll

windows10-2004-x64

8

雷霆之�...ie.dll

windows7-x64

1

雷霆之�...ie.dll

windows10-2004-x64

1

雷霆之�...p1.dll

windows7-x64

1

雷霆之�...p1.dll

windows10-2004-x64

3

雷霆之�...PI.dll

windows7-x64

1

雷霆之�...PI.dll

windows10-2004-x64

1

雷霆之�...on.exe

windows7-x64

5

雷霆之�...on.exe

windows10-2004-x64

5

雷霆之�...et.dll

windows7-x64

1

雷霆之�...et.dll

windows10-2004-x64

1

雷霆之�...ln.dll

windows7-x64

1

雷霆之�...ln.dll

windows10-2004-x64

1

雷霆之�...oe.dll

windows7-x64

1

雷霆之�...oe.dll

windows10-2004-x64

1

雷霆之�...ll.dll

windows7-x64

1

雷霆之�...ll.dll

windows10-2004-x64

1

雷霆之�...ir.dll

windows7-x64

1

雷霆之�...ir.dll

windows10-2004-x64

1

雷霆之�...��.url

windows7-x64

1

雷霆之�...��.url

windows10-2004-x64

1

雷霆之�....3.exe

windows7-x64

8

雷霆之�....3.exe

windows10-2004-x64

8

雷霆之�...��.url

windows7-x64

1

雷霆之�...��.url

windows10-2004-x64

1

Analysis

  • max time kernel
    108s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    25-11-2022 22:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    雷霆之怒夜涩辅助V2.3/雷霆之怒夜涩辅助V2.3.exe

  • Size

    1.8MB

  • MD5

    09be0e9da4098fd10fc3e664db9a6c76

  • SHA1

    59e70a5a5a5bfc78a83ccf55ed968ee0d40fc651

  • SHA256

    cb7d20ec893bc7f68332a4867b4074650fdf8a250a44926beae4a069e444b0cb

  • SHA512

    f69269fa538dc900e7d9579ef8d362b962cc2f6d52af49672ae8206e2741c8b3e4b0cad41b0d43a64e851403da9eeff3a62354083b4108286036579f47833829

  • SSDEEP

    24576:g3iFu/RkAgSl+I7CfHhZ/uOHTLXs/nGRMItConG3CgOuKrMA3jIEPn7:gSY/RkdHD8i9nKOuYTl

Score
8/10
upxvmprotect

Malware Config

Signatures

  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Modifies Internet Explorer start page 1 TTPs 1 IoCs
    stealer
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\雷霆之怒夜涩辅助V2.3\雷霆之怒夜涩辅助V2.3.exe
    "C:\Users\Admin\AppData\Local\Temp\雷霆之怒夜涩辅助V2.3\雷霆之怒夜涩辅助V2.3.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Modifies Internet Explorer start page
    • Suspicious use of SetWindowsHookEx
    PID:1944

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1944-54-0x0000000075CF1000-0x0000000075CF3000-memory.dmp
    Filesize

    8KB

    Download
  • memory/1944-55-0x0000000000400000-0x000000000060E000-memory.dmp
    Filesize

    2.1MB

    Download
  • memory/1944-57-0x0000000000400000-0x000000000060E000-memory.dmp
    Filesize

    2.1MB

    Download
  • memory/1944-58-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-59-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-60-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-64-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-66-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-68-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-72-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-74-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-76-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-78-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-80-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-84-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-86-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-90-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-92-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-94-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-98-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-96-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-100-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-88-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-82-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-70-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-62-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-101-0x0000000010000000-0x000000001003D000-memory.dmp
    Filesize

    244KB

    Download
  • memory/1944-102-0x0000000000400000-0x000000000060E000-memory.dmp
    Filesize

    2.1MB

    Download