Overview
overview
8Static
static
8ǰ�...ew.dll
windows7-x64
1ǰ�...ew.dll
windows10-2004-x64
1ǰ�...YS.dll
windows7-x64
1ǰ�...YS.dll
windows10-2004-x64
1ǰ�...om.dll
windows7-x64
3ǰ�...om.dll
windows10-2004-x64
3ǰ�...p1.dll
windows7-x64
3ǰ�...p1.dll
windows10-2004-x64
3ǰ�...PI.dll
windows7-x64
1ǰ�...PI.dll
windows10-2004-x64
1ǰ�...et.dll
windows7-x64
1ǰ�...et.dll
windows10-2004-x64
1ǰ�...ln.dll
windows7-x64
1ǰ�...ln.dll
windows10-2004-x64
1ǰ�...ll.dll
windows7-x64
1ǰ�...ll.dll
windows10-2004-x64
1ǰ�...Ex.dll
windows7-x64
1ǰ�...Ex.dll
windows10-2004-x64
1ǰ�...ec.dll
windows7-x64
1ǰ�...ec.dll
windows10-2004-x64
1ǰ�....3.exe
windows7-x64
1ǰ�....3.exe
windows10-2004-x64
1�...3K.dll
windows7-x64
8�...3K.dll
windows10-2004-x64
8�...KY.dll
windows7-x64
8�...KY.dll
windows10-2004-x64
8�...me.dll
windows7-x64
8�...me.dll
windows10-2004-x64
8�...��.exe
windows7-x64
8�...��.exe
windows10-2004-x64
8�...56.exe
windows7-x64
8�...56.exe
windows10-2004-x64
8Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 21:00
Behavioral task
behavioral1
Sample
ǰ/HtmlView.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ǰ/HtmlView.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
ǰ/SYS.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
ǰ/SYS.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
ǰ/com.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ǰ/com.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
ǰ/dp1.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
ǰ/dp1.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
ǰ/eAPI.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
ǰ/eAPI.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
ǰ/internet.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
ǰ/internet.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
ǰ/krnln.dll
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
ǰ/krnln.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
ǰ/shell.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
ǰ/shell.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
ǰ/shellEx.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
ǰ/shellEx.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
ǰ/spec.dll
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
ǰ/spec.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
ǰ/ǰ1.3.exe
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
ǰ/ǰ1.3.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
Ѱ1120˺test123456/3K.dll
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
Ѱ1120˺test123456/3K.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
Ѱ1120˺test123456/SKY.dll
Resource
win7-20221111-en
Behavioral task
behavioral26
Sample
Ѱ1120˺test123456/SKY.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
Ѱ1120˺test123456/game.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
Ѱ1120˺test123456/game.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
Ѱ1120˺test123456/.exe
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
Ѱ1120˺test123456/.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral31
Sample
Ѱ1120˺test123456/˺test123456.exe
Resource
win7-20221111-en
Behavioral task
behavioral32
Sample
Ѱ1120˺test123456/˺test123456.exe
Resource
win10v2004-20220901-en
General
-
Target
Ѱ1120˺test123456/.exe
-
Size
4.1MB
-
MD5
4707f303bf7416fdb58e2ae62e64714c
-
SHA1
1645325a57bd9a4b92aceae98661dc2a6d9d9293
-
SHA256
db9f698360d7ca795075fbbaf62b60dea53cb060d6b7640c8dfc268b18bf8af3
-
SHA512
76f65af2918685ccdbb2f7bbb83c0f9ab3abfbc927a94b2a52ebac9fd54de54cec5b95bc4294d89b2756c7c05f9263a0c077d4b302bd0b1e4f3616cfcbd92ce4
-
SSDEEP
98304:tJkE1sb/ywRW3p5O1OJa3BVuFsCxlejnlXOXiw3oDl3Yqw:THWR8/UOaMlxgDNOOF
Malware Config
Signatures
-
resource yara_rule behavioral30/memory/840-132-0x0000000000400000-0x000000000083A000-memory.dmp vmprotect behavioral30/memory/840-133-0x0000000000400000-0x000000000083A000-memory.dmp vmprotect behavioral30/memory/840-134-0x0000000000400000-0x000000000083A000-memory.dmp vmprotect -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 840 .exe 840 .exe