Static task
static1
Behavioral task
behavioral1
Sample
4.7.3İ/usb-over-network-client4.7.3/usb-over-network-client.msi
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4.7.3İ/usb-over-network-client4.7.3/usb-over-network-client.msi
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
usbclient.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
usbclient.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
4.7.3İ/usb-over-network-server4.7.3/usb-over-network-server.msi
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
4.7.3İ/usb-over-network-server4.7.3/usb-over-network-server.msi
Resource
win10v2004-20230915-en
General
-
Target
0fc062feb654ae346f062e2359258f468a66c3c3a52c318b8def7af5a0928540
-
Size
9.4MB
-
MD5
415bfb2af7ddb424bfcf46b6d744a105
-
SHA1
cd7b67ec8d8b802e826c599cb42f78e0fa8b4103
-
SHA256
0fc062feb654ae346f062e2359258f468a66c3c3a52c318b8def7af5a0928540
-
SHA512
01fc89862262d2a78a2b7af3b31ab5975124a7e2d4fb182fa5896f61c7c91f980a279b20c04d29357ffd0ade0172154812d77ec47472b4350c47739b92978701
-
SSDEEP
196608:rSfYPJ6Ay88xl8716CVj6YXRNzljjwia6f+E+wsvzGcJZNeYIBdpN3Hi8LuotdWU:rSfYxsB8716CVj6YXPhfa6f+zn7naj3x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/usbclient.exe
Files
-
0fc062feb654ae346f062e2359258f468a66c3c3a52c318b8def7af5a0928540.zip
-
4.7.3İ/usb-over-network-client4.7.3/usb-over-network-client.msi.msi
-
4.7.3İ/usb-over-network-client4.7.3/usbclient-32λļ.rar.rar
-
usbclient.exe.exe windows:4 windows x86
446e2d9c726df60f07c6bf67e612e6d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
WritePrivateProfileStringW
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
HeapSize
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetEndOfFile
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
UnlockFile
ExpandEnvironmentStringsA
LockFile
FlushFileBuffers
SetFilePointer
GetFileTime
GetFileSize
GetFileAttributesW
FindFirstFileW
FindClose
FindResourceExW
GetThreadLocale
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetVersion
GlobalGetAtomNameW
SuspendThread
SetThreadPriority
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
VirtualProtect
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
GetModuleHandleA
InterlockedDecrement
GlobalFree
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
lstrlenA
WideCharToMultiByte
WaitForMultipleObjects
GetVersionExW
GetDateFormatW
GetCommandLineW
GetModuleFileNameW
FileTimeToSystemTime
GlobalUnlock
GlobalLock
TerminateThread
ResumeThread
GetTickCount
CreateEventW
lstrcpynW
GetProcAddress
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
lstrlenW
CreateMutexW
Sleep
ReleaseMutex
WaitNamedPipeW
CreateFileW
CloseHandle
OpenFileMappingW
OpenSemaphoreW
ReleaseSemaphore
SetEvent
WriteFile
OpenEventW
SetLastError
WaitForSingleObject
ReadFile
ResetEvent
UnmapViewOfFile
MapViewOfFile
GetCurrentProcessId
GetLastError
LockResource
LoadResource
SizeofResource
SetHandleCount
FindResourceW
user32
LockWindowUpdate
SetCapture
IsDialogMessageW
GetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
IsWindowVisible
GetDCEx
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetParent
EqualRect
DeferWindowPos
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
SetWindowLongW
DestroyCursor
IsWindow
GetClientRect
SetCursor
GetSysColor
SetTimer
GetWindowRect
KillTimer
GetDesktopWindow
UpdateWindow
SendMessageW
UnregisterClassA
MapDialogRect
ReleaseCapture
CloseClipboard
GetClipboardData
OpenClipboard
MessageBoxW
LoadCursorW
SetForegroundWindow
ModifyMenuW
GetMenu
GetSubMenu
LoadMenuW
ScreenToClient
GetCursorPos
PostMessageW
SetWindowTextW
GetDC
EnableWindow
SetParent
CharUpperW
UnregisterClassW
GetSysColorBrush
LoadBitmapW
LoadIconW
PostQuitMessage
ShowOwnedPopups
UnionRect
IsRectEmpty
IsZoomed
WindowFromPoint
SetRect
ReuseDDElParam
UnpackDDElParam
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
GetMessageW
TranslateMessage
ValidateRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
GetAsyncKeyState
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
GetMenuState
GetMenuStringW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuItemID
ShowWindow
FillRect
gdi32
SelectClipRgn
CreateRectRgn
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteDC
CreatePatternBrush
SetMapMode
CreateCompatibleDC
GetDeviceCaps
CreateSolidBrush
CreateRectRgnIndirect
PatBlt
CreateCompatibleBitmap
GetBkColor
GetCharWidthW
StretchDIBits
GetTextMetricsW
SetRectRgn
CombineRgn
EnumFontFamiliesExW
ExcludeClipRect
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetStockObject
CreateFontIndirectW
GetObjectW
DeleteObject
CreateFontW
CreateBitmap
GetTextExtentPoint32W
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegOpenKeyExA
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExA
shell32
ShellExecuteW
DragFinish
DragQueryFileW
SHGetSpecialFolderPathW
comctl32
_TrackMouseEvent
shlwapi
UrlUnescapeW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathAppendW
PathIsUNCW
oleaut32
VariantInit
VariantChangeType
SysAllocStringLen
VariantClear
mpr
WNetCloseEnum
WNetOpenEnumW
WNetEnumResourceW
ws2_32
WSAStartup
wininet
InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
Sections
.text Size: 400KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 604KB - Virtual size: 602KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4.7.3İ/usb-over-network-client4.7.3/usbclient-64λļ.rar.rar
-
4.7.3İ/usb-over-network-server4.7.3/2KEY.txt
-
4.7.3İ/usb-over-network-server4.7.3/3KEY.txt
-
4.7.3İ/usb-over-network-server4.7.3/4KEY.txt
-
4.7.3İ/usb-over-network-server4.7.3/5KEY.txt
-
4.7.3İ/usb-over-network-server4.7.3/KEY.txt
-
4.7.3İ/usb-over-network-server4.7.3/usb-over-network-server.msi.msi
-
4.7.3İ/usb-over-network-server4.7.3/usbserver-32λļ.rar.rar
-
4.7.3İ/usb-over-network-server4.7.3/usbserver-64λļ.rar.rar