Overview
overview
8Static
static
8急速辅�...ew.dll
windows7-x64
1急速辅�...ew.dll
windows10-2004-x64
1急速辅�...YS.dll
windows7-x64
1急速辅�...YS.dll
windows10-2004-x64
1急速辅�...on.dll
windows7-x64
1急速辅�...on.dll
windows10-2004-x64
1急速辅�...om.dll
windows7-x64
3急速辅�...om.dll
windows10-2004-x64
3急速辅�...p1.dll
windows7-x64
3急速辅�...p1.dll
windows10-2004-x64
3急速辅�...PI.dll
windows7-x64
1急速辅�...PI.dll
windows10-2004-x64
1急速辅�...ia.dll
windows7-x64
1急速辅�...ia.dll
windows10-2004-x64
1急速辅�...ss.exe
windows7-x64
急速辅�...ss.exe
windows10-2004-x64
急速辅�...t2.dll
windows7-x64
1急速辅�...t2.dll
windows10-2004-x64
1急速辅�...t5.dll
windows7-x64
1急速辅�...t5.dll
windows10-2004-x64
急速辅�...et.dll
windows7-x64
1急速辅�...et.dll
windows10-2004-x64
1急速辅�...ln.dll
windows7-x64
1急速辅�...ln.dll
windows10-2004-x64
1急速辅�...ll.dll
windows7-x64
1急速辅�...ll.dll
windows10-2004-x64
1急速辅�...Ex.dll
windows7-x64
1急速辅�...Ex.dll
windows10-2004-x64
1急速辅�...ec.dll
windows7-x64
1急速辅�...ec.dll
windows10-2004-x64
1急速辅�...se.exe
windows7-x64
5急速辅�...se.exe
windows10-2004-x64
5Analysis
-
max time kernel
150s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 04:54
Behavioral task
behavioral1
Sample
急速辅助免费版1223/前锋加速器1.6/HtmlView.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
急速辅助免费版1223/前锋加速器1.6/HtmlView.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
急速辅助免费版1223/前锋加速器1.6/SYS.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
急速辅助免费版1223/前锋加速器1.6/SYS.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
急速辅助免费版1223/前锋加速器1.6/TrayIcon.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
急速辅助免费版1223/前锋加速器1.6/TrayIcon.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
急速辅助免费版1223/前锋加速器1.6/com.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
急速辅助免费版1223/前锋加速器1.6/com.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
急速辅助免费版1223/前锋加速器1.6/dp1.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
急速辅助免费版1223/前锋加速器1.6/dp1.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
急速辅助免费版1223/前锋加速器1.6/eAPI.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
急速辅助免费版1223/前锋加速器1.6/eAPI.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
急速辅助免费版1223/前锋加速器1.6/eMMedia.dll
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
急速辅助免费版1223/前锋加速器1.6/eMMedia.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
急速辅助免费版1223/前锋加速器1.6/hideprocess.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
急速辅助免费版1223/前锋加速器1.6/hideprocess.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
急速辅助免费版1223/前锋加速器1.6/iext2.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
急速辅助免费版1223/前锋加速器1.6/iext2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
急速辅助免费版1223/前锋加速器1.6/iext5.dll
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
急速辅助免费版1223/前锋加速器1.6/iext5.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
急速辅助免费版1223/前锋加速器1.6/internet.dll
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
急速辅助免费版1223/前锋加速器1.6/internet.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
急速辅助免费版1223/前锋加速器1.6/krnln.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
急速辅助免费版1223/前锋加速器1.6/krnln.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
急速辅助免费版1223/前锋加速器1.6/shell.dll
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
急速辅助免费版1223/前锋加速器1.6/shell.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
急速辅助免费版1223/前锋加速器1.6/shellEx.dll
Resource
win7-20220901-en
Behavioral task
behavioral28
Sample
急速辅助免费版1223/前锋加速器1.6/shellEx.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
急速辅助免费版1223/前锋加速器1.6/spec.dll
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
急速辅助免费版1223/前锋加速器1.6/spec.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
急速辅助免费版1223/前锋加速器1.6/前锋加速器1.6_se.exe
Resource
win7-20221111-en
Behavioral task
behavioral32
Sample
急速辅助免费版1223/前锋加速器1.6/前锋加速器1.6_se.exe
Resource
win10v2004-20221111-en
General
-
Target
急速辅助免费版1223/前锋加速器1.6/前锋加速器1.6_se.exe
-
Size
1.8MB
-
MD5
e184c47d8f1d0ecceeacf2adac3fc7f1
-
SHA1
0a4170fdf173eb5cc79451a1e7b4204d5d193786
-
SHA256
40b4902d7f75a1255d6db7e3ca651bd330bf2fc3c06aa6020f408a7e54bb074b
-
SHA512
76ed1bd9c745f1c8effdc2a67969ccb949d8ec442fad822019857d11fa816443486665c8f8465cf63f0200b23abda1035246cc8a92bad41d76cee62fbc7339d5
-
SSDEEP
49152:kPkcOsQNtz32qvLtumPNejafNxVdpPIGjPRX:kNfQn3ntumPwjaf7VdpHRX
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 5 IoCs
Processes:
前锋加速器1.6_se.exepid process 4496 前锋加速器1.6_se.exe 4496 前锋加速器1.6_se.exe 4496 前锋加速器1.6_se.exe 4496 前锋加速器1.6_se.exe 4496 前锋加速器1.6_se.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4496-132-0x0000000000400000-0x0000000000817000-memory.dmpFilesize
4.1MB
-
memory/4496-133-0x0000000077C10000-0x0000000077DB3000-memory.dmpFilesize
1.6MB
-
memory/4496-134-0x0000000076540000-0x0000000076755000-memory.dmpFilesize
2.1MB
-
memory/4496-136-0x0000000076970000-0x0000000076B10000-memory.dmpFilesize
1.6MB
-
memory/4496-137-0x0000000075FE0000-0x000000007605A000-memory.dmpFilesize
488KB
-
memory/4496-1481-0x0000000000400000-0x0000000000817000-memory.dmpFilesize
4.1MB
-
memory/4496-1482-0x0000000000400000-0x0000000000817000-memory.dmpFilesize
4.1MB
-
memory/4496-1483-0x0000000002A80000-0x0000000002B80000-memory.dmpFilesize
1024KB
-
memory/4496-1484-0x0000000000400000-0x0000000000817000-memory.dmpFilesize
4.1MB