Overview
overview
7Static
static
7login.rar
windows7-x64
3login.rar
windows10-2004-x64
3login/LoginServer.exe
windows7-x64
7login/LoginServer.exe
windows10-2004-x64
7login/Regi...er.bat
windows7-x64
1login/Regi...er.bat
windows10-2004-x64
1login/banned_ip.cfg
windows7-x64
3login/banned_ip.cfg
windows10-2004-x64
3login/conf...er.ini
windows7-x64
1login/conf...er.ini
windows10-2004-x64
1login/console.cfg
windows7-x64
3login/console.cfg
windows10-2004-x64
3login/data...me.xml
windows7-x64
1login/data...me.xml
windows10-2004-x64
1login/java.cfg
windows7-x64
3login/java.cfg
windows10-2004-x64
3login/log.cfg
windows7-x64
3login/log.cfg
windows10-2004-x64
3login/log/java0.log
windows7-x64
1login/log/java0.log
windows10-2004-x64
1login/log/java1.log
windows7-x64
1login/log/java1.log
windows10-2004-x64
1login/log/java10.log
windows7-x64
1login/log/java10.log
windows10-2004-x64
1login/log/java11.log
windows7-x64
1login/log/java11.log
windows10-2004-x64
1login/log/java12.log
windows7-x64
1login/log/java12.log
windows10-2004-x64
1login/log/java13.log
windows7-x64
1login/log/java13.log
windows10-2004-x64
1login/log/java14.log
windows7-x64
1login/log/java14.log
windows10-2004-x64
1Behavioral task
behavioral1
Sample
login.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
login.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
login/LoginServer.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
login/LoginServer.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
login/RegisterGameServer.bat
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
login/RegisterGameServer.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
login/banned_ip.cfg
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
login/banned_ip.cfg
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
login/config/LoginServer.ini
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
login/config/LoginServer.ini
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
login/console.cfg
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
login/console.cfg
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
login/data/servername.xml
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
login/data/servername.xml
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
login/java.cfg
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
login/java.cfg
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
login/log.cfg
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
login/log.cfg
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
login/log/java0.log
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
login/log/java0.log
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
login/log/java1.log
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
login/log/java1.log
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
login/log/java10.log
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
login/log/java10.log
Resource
win10v2004-20230221-en
Behavioral task
behavioral25
Sample
login/log/java11.log
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
login/log/java11.log
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
login/log/java12.log
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
login/log/java12.log
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
login/log/java13.log
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
login/log/java13.log
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
login/log/java14.log
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
login/log/java14.log
Resource
win10v2004-20230220-en
General
-
Target
login.rar
-
Size
70KB
-
MD5
075ed5f6fac4e3d0c79c89cc09e8e8ba
-
SHA1
9aa8edff959118ef1bfe1fbf51d440becfb3268b
-
SHA256
2381f81fb2673ab442055d1d8cf44fa61c23ada44ab34aeb74e201ab74d5cf6a
-
SHA512
9e038702adba5c44dc285a472f0753889713a352b0e758758d17391f4e1d8350ea0bd183b2840f1375b1040028478db086d30f8bd46943d4aea92b7208a113cf
-
SSDEEP
1536:QHyDaPWtGR8ghQ3++9inlByqfIGz41xcSTqeUGlqEB1Nl1Nf:pmPFSgaO+AXyKfcrkGzBh1Nf
Malware Config
Signatures
-
resource yara_rule static1/unpack001/login/LoginServer.exe upx
Files
-
login.rar.rar
-
login/LoginServer.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
login/LoginServer.sh.sh linux
-
login/LoginServerTask.sh.sh linux
-
login/RegisterGameServer.bat
-
login/RegisterGameServer.sh.sh linux
-
login/SQLAccountManager.bat
-
login/SQLAccountManager.sh.sh linux
-
login/banned_ip.cfg
-
login/config/LoginServer.ini
-
login/console.cfg
-
login/data/servername.xml.xml
-
login/data/servername.xsd.xml
-
login/java.cfg
-
login/log.cfg
-
login/log/java0.log
-
login/log/java1.log
-
login/log/java10.log
-
login/log/java11.log
-
login/log/java12.log
-
login/log/java13.log
-
login/log/java14.log
-
login/log/java15.log
-
login/log/java16.log
-
login/log/java17.log
-
login/log/java18.log
-
login/log/java19.log
-
login/log/java2.log
-
login/log/java3.log
-
login/log/java4.log
-
login/log/java5.log
-
login/log/java6.log
-
login/log/java7.log
-
login/log/java8.log
-
login/log/java9.log