Overview
overview
8Static
static
8a752e7e32c...ac.rar
windows7-x64
3a752e7e32c...ac.rar
windows10-2004-x64
367pp-10-48...�/.url
windows7-x64
167pp-10-48...�/.url
windows10-2004-x64
167pp-10-48...�/.exe
windows7-x64
167pp-10-48...�/.exe
windows10-2004-x64
167pp-10-48...er.exe
windows7-x64
167pp-10-48...er.exe
windows10-2004-x64
167pp-10-48...�/.chm
windows7-x64
167pp-10-48...�/.chm
windows10-2004-x64
167pp-10-48...�/.exe
windows7-x64
167pp-10-48...�/.exe
windows10-2004-x64
167pp-10-48...�/.exe
windows7-x64
167pp-10-48...�/.exe
windows10-2004-x64
167pp-10-48...�/.exe
windows7-x64
167pp-10-48...�/.exe
windows10-2004-x64
167pp-10-48...�/.exe
windows7-x64
67pp-10-48...�/.exe
windows10-2004-x64
167pp-10-48...al.dll
windows7-x64
167pp-10-48...al.dll
windows10-2004-x64
167pp-10-48...�/.exe
windows7-x64
167pp-10-48...�/.exe
windows10-2004-x64
367pp-10-48...�/.dll
windows7-x64
67pp-10-48...�/.dll
windows10-2004-x64
167pp-10-48...�/.dll
windows7-x64
167pp-10-48...�/.dll
windows10-2004-x64
167pp-10-48...ir.exe
windows7-x64
867pp-10-48...ir.exe
windows10-2004-x64
867pp-10-48...�/.exe
windows7-x64
67pp-10-48...�/.exe
windows10-2004-x64
67pp-10-48...�/.exe
windows7-x64
167pp-10-48...�/.exe
windows10-2004-x64
1Analysis
-
max time kernel
74s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 21:06
Behavioral task
behavioral1
Sample
a752e7e32cb9d6ca0f84db74ba5a69e8c01aa7da3e8b7ad37f180b2c538e8fac.rar
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a752e7e32cb9d6ca0f84db74ba5a69e8c01aa7da3e8b7ad37f180b2c538e8fac.rar
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.url
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/mirserver/GameCenter.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/mirserver/GameCenter.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.chm
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.chm
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral15
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/mirserver/Mir200/IPLocal.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/mirserver/Mir200/IPLocal.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.dll
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.dll
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/mirserver/Mir200/mir.exe
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/mirserver/Mir200/mir.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral29
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.exe
Resource
win10v2004-20220812-en
General
-
Target
67pp-10-480/西域网络1.85合击战神盛大归来版/西域网络1.85合击战神盛大归来版/.dll
-
Size
376KB
-
MD5
b07ea765f95dd8aedc22a2288238c870
-
SHA1
701ee13edb6d2c91bc8b1cbb60ebae926e257fcc
-
SHA256
3e65c89acd0f2276e9b84a5ac4257f9848418b3f420dc85cf4a43d209a8cf7be
-
SHA512
02484bb041fea746898949d697faa73893e6b15edb729427bca40142e43fa530bb8eb1c2459935037a6cb55ad522143ed6237b24c0256a51d87e614356781933
-
SSDEEP
6144:DESe9vuJ3l8lf5XOIRHq5Fulct352aKSwnXJ/bY5g3FG3h4duT+IsgKuQP77:ABvke5vdq5Ylc/XKSwXpbYP36TaoP
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2904 wrote to memory of 1168 2904 rundll32.exe 81 PID 2904 wrote to memory of 1168 2904 rundll32.exe 81 PID 2904 wrote to memory of 1168 2904 rundll32.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\67pp-10-480\西域网络1.85合击战神盛大归来版\西域网络1.85合击战神盛大归来版\.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2904 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\67pp-10-480\西域网络1.85合击战神盛大归来版\西域网络1.85合击战神盛大归来版\.dll,#12⤵PID:1168
-