Overview
overview
10Static
static
7-服务端.exe
windows10-2004-x64
81.exe
windows10-2004-x64
1360tray.exe
windows10-2004-x64
7Loader/专...31.exe
windows10-2004-x64
10Microsoft.exe
windows10-2004-x64
1a.exe
windows10-2004-x64
1check-2023-08-01.exe
windows10-2004-x64
1flashcente...cn.exe
windows10-2004-x64
7muyyuvd.exe
windows10-2004-x64
7pdf安装.exe
windows10-2004-x64
1东方有�...��.exe
windows10-2004-x64
10关于部�...��.exe
windows10-2004-x64
10国家电�...��.exe
windows10-2004-x64
7广东省�...��.exe
windows10-2004-x64
10广东省�...07.exe
windows10-2004-x64
1录屏精�...��.exe
windows10-2004-x64
7火绒网�...��.exe
windows10-2004-x64
10Analysis
-
max time kernel
170s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
10-09-2023 14:19
Behavioral task
behavioral1
Sample
-服务端.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral3
Sample
360tray.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral4
Sample
Loader/专项查杀工具-信息中心20230831.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral5
Sample
Microsoft.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral6
Sample
a.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral7
Sample
check-2023-08-01.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral8
Sample
flashcenter_install_cn.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral9
Sample
muyyuvd.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral10
Sample
pdf安装.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral11
Sample
东方有线网络有限公司岗位调整通知.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral12
Sample
关于部分人员违规收费、开具假发票、收取会议费、培训费等违法行为线索.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral13
Sample
国家电网有限公司企业负责人收入情况.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral14
Sample
广东省海洋综合执法辅助人员管理暂行规定的意见.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral15
Sample
广东省统计局智能普查代码API信息-20230907.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral16
Sample
录屏精灵-小方app-录制.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral17
Sample
火绒网络连接查询.exe
Resource
win10v2004-20230831-en
General
-
Target
muyyuvd.exe
-
Size
1.4MB
-
MD5
768e4477abc5c60667290601bfe58b8e
-
SHA1
688c99ef523cff22a20bfe70b1a9d3855669ea21
-
SHA256
e7c87b0791bdb4f723af07d7b6c8dd79c3d9e1667f7ff6ad271665f3755d6ab8
-
SHA512
1c57a8671dd4623d434116c875c63b31df123896cd6e00d7d8daa8c4d9c9bf09d085f06f62c302a7b2a8ab08520d9bf49062e824e6b3420f75893f13b18284cc
-
SSDEEP
12288:kTeEBQDPeK6zp48Tm9yLogwL8soAsgp8R3D0kUodp3nBigg/vwr2I4TgV:QehDPh6XoyEgGEARpvtoPx8Sg
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral9/memory/2740-0-0x0000000000400000-0x0000000000564000-memory.dmp vmprotect behavioral9/memory/2740-1-0x0000000000400000-0x0000000000564000-memory.dmp vmprotect behavioral9/memory/2740-2-0x0000000000400000-0x0000000000564000-memory.dmp vmprotect behavioral9/memory/2740-3-0x0000000000400000-0x0000000000564000-memory.dmp vmprotect -
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes:
muyyuvd.exepid process 2740 muyyuvd.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2740-0-0x0000000000400000-0x0000000000564000-memory.dmpFilesize
1.4MB
-
memory/2740-1-0x0000000000400000-0x0000000000564000-memory.dmpFilesize
1.4MB
-
memory/2740-2-0x0000000000400000-0x0000000000564000-memory.dmpFilesize
1.4MB
-
memory/2740-3-0x0000000000400000-0x0000000000564000-memory.dmpFilesize
1.4MB