Overview
overview
8Static
static
81001下载乐园.url
windows7-x64
11001下载乐园.url
windows10-2004-x64
1PCGuard.exe
windows7-x64
6PCGuard.exe
windows10-2004-x64
6Readme.js
windows7-x64
1Readme.js
windows10-2004-x64
1Shutdown.exe
windows7-x64
1Shutdown.exe
windows10-2004-x64
1StartUp.exe
windows7-x64
3StartUp.exe
windows10-2004-x64
3Update.exe
windows7-x64
1Update.exe
windows10-2004-x64
1Vdesktop.exe
windows7-x64
1Vdesktop.exe
windows10-2004-x64
1WinSock2.dll
windows7-x64
1WinSock2.dll
windows10-2004-x64
1spawn.exe
windows7-x64
1spawn.exe
windows10-2004-x64
1Analysis
-
max time kernel
132s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 20:35
Behavioral task
behavioral1
Sample
1001下载乐园.url
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1001下载乐园.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
PCGuard.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
PCGuard.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
Readme.js
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Readme.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Shutdown.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Shutdown.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
StartUp.exe
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
StartUp.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
Update.exe
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
Update.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
Vdesktop.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
Vdesktop.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
WinSock2.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
WinSock2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
spawn.exe
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
spawn.exe
Resource
win10v2004-20221111-en
General
-
Target
Vdesktop.exe
-
Size
389KB
-
MD5
a2c02e95507c7a6572977fffb25b7744
-
SHA1
ab424d6f8a1d36a158377fb58e6abaca97bc8f19
-
SHA256
a6d554dd2449e966be1d015fc4278c26437309c73c2e83d5dfa00dd63b9e6e5f
-
SHA512
b0c8b579252a0a5efc36bd89a89d0c231b58b10741cc7e6e958eb57038ce04d1736194779359274426379c34e95b824ce0fde44b612d73e7849cf7ef7cc60070
-
SSDEEP
6144:lsjSNoyKhhDljxoi1ow4zPhVDa/Cvfh/3gNinhy4VW5JX9DgtNRROmha6caVhyse:CjSNf0Ro9zPhV+mv9hy3J9KD5le
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 5 IoCs
pid Process 1456 Vdesktop.exe 1456 Vdesktop.exe 1456 Vdesktop.exe 1456 Vdesktop.exe 1456 Vdesktop.exe -
Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1456 Vdesktop.exe 1456 Vdesktop.exe 1456 Vdesktop.exe 1456 Vdesktop.exe 1456 Vdesktop.exe