Overview
overview
8Static
static
8CardMaster/Card.dll
windows7-x64
1CardMaster/Card.dll
windows10-2004-x64
1CardMaster/Card.exe
windows7-x64
6CardMaster/Card.exe
windows10-2004-x64
5CardMaster...er.exe
windows7-x64
3CardMaster...er.exe
windows10-2004-x64
3CardMaster...p3.exe
windows7-x64
6CardMaster...p3.exe
windows10-2004-x64
5CardMaster/Cardf.exe
windows7-x64
6CardMaster/Cardf.exe
windows10-2004-x64
3CardMaster...p3.exe
windows7-x64
6CardMaster...p3.exe
windows10-2004-x64
3CardMaster/Crack.exe
windows7-x64
3CardMaster/Crack.exe
windows10-2004-x64
3CardMaster/HELP.chm
windows7-x64
1CardMaster/HELP.chm
windows10-2004-x64
1CardMaster/hbkuco.exe
windows7-x64
1CardMaster/hbkuco.exe
windows10-2004-x64
1CardMaster...��.url
windows7-x64
1CardMaster...��.url
windows10-2004-x64
1CardMaster...��.url
windows7-x64
1CardMaster...��.url
windows10-2004-x64
1Analysis
-
max time kernel
101s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 03:52
Behavioral task
behavioral1
Sample
CardMaster/Card.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
CardMaster/Card.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
CardMaster/Card.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
CardMaster/Card.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
CardMaster/CardMaster.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
CardMaster/CardMaster.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
CardMaster/CardMp3.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
CardMaster/CardMp3.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
CardMaster/Cardf.exe
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
CardMaster/Cardf.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
CardMaster/Cardfmp3.exe
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
CardMaster/Cardfmp3.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
CardMaster/Crack.exe
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
CardMaster/Crack.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
CardMaster/HELP.chm
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
CardMaster/HELP.chm
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
CardMaster/hbkuco.exe
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
CardMaster/hbkuco.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
CardMaster/访问我们的网站!.url
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
CardMaster/访问我们的网站!.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
CardMaster/金山毒霸2008无限升级破解版.url
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
CardMaster/金山毒霸2008无限升级破解版.url
Resource
win10v2004-20221111-en
General
-
Target
CardMaster/Cardfmp3.exe
-
Size
410KB
-
MD5
4195f5a4f1560ca3bf57bf52cabe3614
-
SHA1
95d616e3e52382c6849bd902bead9ca8a6b5b002
-
SHA256
5716de93a729122c1968bcb1962845ea55b3852bdac8869f8dbd42f82b604508
-
SHA512
408312a479699f551e08dd0acbe8a55b872615d635347c3e2a354d71b91c7d2dd58cf35520e7b1a6dda622241636a2afa58c9261b007020a2369509eae001d17
-
SSDEEP
12288:9vdACI8VZMLa1/qVYq69KyhNtTirdDJN:908VaLa1/dSyVTEddN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2840 3372 WerFault.exe 75
Processes
-
C:\Users\Admin\AppData\Local\Temp\CardMaster\Cardfmp3.exe"C:\Users\Admin\AppData\Local\Temp\CardMaster\Cardfmp3.exe"1⤵PID:3372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3372 -s 7442⤵
- Program crash
PID:2840
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 200 -p 3372 -ip 33721⤵PID:2948