Overview
overview
8Static
static
3隔離區�...up.exe
windows7-x64
1隔離區�...up.exe
windows10-2004-x64
1隔離區�...up.exe
windows7-x64
1隔離區�...up.exe
windows10-2004-x64
1隔離區�...rv.exe
windows7-x64
7隔離區�...rv.exe
windows10-2004-x64
7隔離區�...nk.exe
windows7-x64
7隔離區�...nk.exe
windows10-2004-x64
7隔離區�...up.exe
windows7-x64
8隔離區�...up.exe
windows10-2004-x64
8隔離區�...Ex.exe
windows7-x64
8隔離區�...Ex.exe
windows10-2004-x64
8隔離區�...tl.exe
windows7-x64
7隔離區�...tl.exe
windows10-2004-x64
7隔離區�...64.exe
windows7-x64
8隔離區�...64.exe
windows10-2004-x64
8隔離區�...UI.exe
windows7-x64
8隔離區�...UI.exe
windows10-2004-x64
8隔離區�...64.exe
windows7-x64
8隔離區�...64.exe
windows10-2004-x64
8隔離區�...up.exe
windows7-x64
7隔離區�...up.exe
windows10-2004-x64
7Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
20-09-2023 08:30
Static task
static1
Behavioral task
behavioral1
Sample
隔離區文件/._cache_DxSetup.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
隔離區文件/._cache_DxSetup.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
隔離區文件/._cache_Setup.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
隔離區文件/._cache_Setup.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
隔離區文件/AERTSrv.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
隔離區文件/AERTSrv.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
隔離區文件/CreateRtkToastLnk.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
隔離區文件/CreateRtkToastLnk.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
隔離區文件/DxSetup.exe
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
隔離區文件/DxSetup.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
隔離區文件/GfxUIEx.exe
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
隔離區文件/GfxUIEx.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
隔離區文件/PROUnstl.exe
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
隔離區文件/PROUnstl.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
隔離區文件/RAVCpl64.exe
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
隔離區文件/RAVCpl64.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
隔離區文件/RtkNGUI.exe
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
隔離區文件/RtkNGUI.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
隔離區文件/RtkNGUI64.exe
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
隔離區文件/RtkNGUI64.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
隔離區文件/Setup.exe
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
隔離區文件/Setup.exe
Resource
win10v2004-20230915-en
General
-
Target
隔離區文件/._cache_DxSetup.exe
-
Size
400KB
-
MD5
024437cfccbd6394df89e961a5983cfc
-
SHA1
296353233ad26d37c96f3827c8401fb33f503ca2
-
SHA256
9e62fe84aa0e0cc32a41150f99b9bbf105c52ba40fb896b5a58a237adafc5bea
-
SHA512
9b553d8d5bf8220c942c9a599a2bab24ac155f5bf5201bac0850c7839070e8f3a764930ce9e5849daf9811dbbc8ced4cfe01565c99ad2e4b18dbbfd8c61e81f0
-
SSDEEP
6144:LiettwIG8EwyZ/ap2KcwQu2QXrK3WTs5z2iHn7/W1QdK1SoooooooooNmiett:MI7vp2KgN/WJSooooooooo
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2464 ._cache_DxSetup.exe 2464 ._cache_DxSetup.exe