Overview
overview
3Static
static
3120-MYSQL-...0.html
windows7-x64
1120-MYSQL-...0.html
windows10-2004-x64
1120-MYSQL-...Up.bat
windows7-x64
1120-MYSQL-...Up.bat
windows10-2004-x64
1120-MYSQL-...pt.exe
windows7-x64
1120-MYSQL-...pt.exe
windows10-2004-x64
1120-MYSQL-...ql.dll
windows7-x64
3120-MYSQL-...ql.dll
windows10-2004-x64
3Analysis
-
max time kernel
30s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
11-05-2023 15:43
Static task
static1
Behavioral task
behavioral1
Sample
120-MYSQL-V999/RX-120-MYSQL-V999/120.html
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
120-MYSQL-V999/RX-120-MYSQL-V999/120.html
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
120-MYSQL-V999/RX-120-MYSQL-V999/CleanUp.bat
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
120-MYSQL-V999/RX-120-MYSQL-V999/CleanUp.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
120-MYSQL-V999/RX-120-MYSQL-V999/encrypt.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
120-MYSQL-V999/RX-120-MYSQL-V999/encrypt.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
120-MYSQL-V999/RX-120-MYSQL-V999/libmysql.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
120-MYSQL-V999/RX-120-MYSQL-V999/libmysql.dll
Resource
win10v2004-20230220-en
General
-
Target
120-MYSQL-V999/RX-120-MYSQL-V999/encrypt.exe
-
Size
52KB
-
MD5
e20f3260419d966d4393fac3ab17654c
-
SHA1
f27320a6395db1cffb1e51c38a7ddf0926a3dab3
-
SHA256
22b915a45bc009e6f2438b0451dc2ae22fe2309a7b5893281624a6044d56ee00
-
SHA512
2bae3b63759c2245d402a0a78dc50e1d2c3029ac5e30832a83757ed5a1af4ed55bde85c547258f80b688ba88754ec5e87f84b67f5bbc501aa9162a72878e66b8
-
SSDEEP
768:YG1A+6jAfJWRTZMouj8Poq2DqqqqwkLD3UxmEKX:j1AncfJ8Poq2DqqqqymEw
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1648 encrypt.exe 1648 encrypt.exe