Overview
overview
9Static
static
7YI_IoT_base.apk
android-9-x86
9ShareSDK.xml
windows7-x64
1ShareSDK.xml
windows10-2004-x64
1alibaba_pu...ld.otf
windows7-x64
3alibaba_pu...ld.otf
windows10-2004-x64
7alibaba_sa...ic.otf
windows7-x64
3alibaba_sa...ic.otf
windows10-2004-x64
7app.4df63c...87.css
windows7-x64
3app.4df63c...87.css
windows10-2004-x64
7bg-alarm-o...02.png
windows7-x64
3bg-alarm-o...02.png
windows10-2004-x64
3bg-alarm.d56d033.png
windows7-x64
3bg-alarm.d56d033.png
windows10-2004-x64
3bg-bind-su...17.png
windows7-x64
3bg-bind-su...17.png
windows10-2004-x64
3bg_w10_bin...83.png
windows7-x64
3bg_w10_bin...83.png
windows10-2004-x64
3bg_w10_bin...33.png
windows7-x64
3bg_w10_bin...33.png
windows10-2004-x64
3bg_w10_bin...9b.png
windows7-x64
3bg_w10_bin...9b.png
windows10-2004-x64
3bind-devic...60.png
windows7-x64
3bind-devic...60.png
windows10-2004-x64
3bind-devic...75.png
windows7-x64
3bind-devic...75.png
windows10-2004-x64
3bind-devic...97.png
windows7-x64
3bind-devic...97.png
windows10-2004-x64
3bind-fail.ee24f95.png
windows7-x64
3bind-fail.ee24f95.png
windows10-2004-x64
3bind-gate-...29.png
windows7-x64
3bind-gate-...29.png
windows10-2004-x64
3bind-gate-...b6.png
windows7-x64
3Analysis
-
max time kernel
28s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system -
submitted
07-07-2023 08:35
Static task
static1
Behavioral task
behavioral1
Sample
YI_IoT_base.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
ShareSDK.xml
Resource
win7-20230703-en
Behavioral task
behavioral3
Sample
ShareSDK.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral4
Sample
alibaba_puhuiyi_bold.otf
Resource
win7-20230703-en
Behavioral task
behavioral5
Sample
alibaba_puhuiyi_bold.otf
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
alibaba_sans_medium_italic.otf
Resource
win7-20230703-en
Behavioral task
behavioral7
Sample
alibaba_sans_medium_italic.otf
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
app.4df63c69c64f6ef78419a0a528801587.css
Resource
win7-20230703-en
Behavioral task
behavioral9
Sample
app.4df63c69c64f6ef78419a0a528801587.css
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
bg-alarm-other.932c602.png
Resource
win7-20230703-en
Behavioral task
behavioral11
Sample
bg-alarm-other.932c602.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
bg-alarm.d56d033.png
Resource
win7-20230703-en
Behavioral task
behavioral13
Sample
bg-alarm.d56d033.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
bg-bind-success.e7c5c17.png
Resource
win7-20230703-en
Behavioral task
behavioral15
Sample
bg-bind-success.e7c5c17.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
bg_w10_bind_one.41d7983.png
Resource
win7-20230703-en
Behavioral task
behavioral17
Sample
bg_w10_bind_one.41d7983.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
bg_w10_bind_three.35c6433.png
Resource
win7-20230703-en
Behavioral task
behavioral19
Sample
bg_w10_bind_three.35c6433.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
bg_w10_bind_two.62f969b.png
Resource
win7-20230703-en
Behavioral task
behavioral21
Sample
bg_w10_bind_two.62f969b.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
bind-device-W10.7a5b360.png
Resource
win7-20230703-en
Behavioral task
behavioral23
Sample
bind-device-W10.7a5b360.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral24
Sample
bind-device-gate.46bb475.png
Resource
win7-20230703-en
Behavioral task
behavioral25
Sample
bind-device-gate.46bb475.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral26
Sample
bind-device-sensor.694c397.png
Resource
win7-20230703-en
Behavioral task
behavioral27
Sample
bind-device-sensor.694c397.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral28
Sample
bind-fail.ee24f95.png
Resource
win7-20230705-en
Behavioral task
behavioral29
Sample
bind-fail.ee24f95.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral30
Sample
bind-gate-guide-first.8538f29.png
Resource
win7-20230703-en
Behavioral task
behavioral31
Sample
bind-gate-guide-first.8538f29.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral32
Sample
bind-gate-guide-second.2ac19b6.png
Resource
win7-20230703-en
General
-
Target
bg_w10_bind_two.62f969b.png
-
Size
49KB
-
MD5
1bada24be56de5d8cac20de2d783524b
-
SHA1
5467e6dce135bb8652d4ff45e2023952c0aeb936
-
SHA256
36c958646ab147ad2dbe274a1f9e963e972202dd8220b4d37434a149e9dcad0c
-
SHA512
51125f7c3f21a66f17523456862b58cd34f775d8a4c6e52f071a7f20560c664162e5f26deaa4bee4135935a548fdb9d81e05c175aec798808a87a3b01dd962b7
-
SSDEEP
1536:XEK7AUpu4+1JCUjqH+oReT+z7QauIcqtMetTzT2h:XEK7dpu4+HCUXoReCQazcqtMe/S
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
rundll32.exepid process 2380 rundll32.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2380-54-0x0000000001D20000-0x0000000001D21000-memory.dmpFilesize
4KB