Overview
overview
8Static
static
3IDM_v6.41....��.bat
windows7-x64
8IDM_v6.41....��.bat
windows10-2004-x64
8IDM_v6.41....��.bat
windows7-x64
8IDM_v6.41....��.bat
windows10-2004-x64
8background.js
windows7-x64
1background.js
windows10-2004-x64
1captured.html
windows7-x64
1captured.html
windows10-2004-x64
1content.js
windows7-x64
1content.js
windows10-2004-x64
1debug.js
windows7-x64
1debug.js
windows10-2004-x64
1document.js
windows7-x64
1document.js
windows10-2004-x64
1welcome.html
windows7-x64
1welcome.html
windows10-2004-x64
1welcome.js
windows7-x64
1welcome.js
windows10-2004-x64
1IDM_v6.41....64.dll
windows7-x64
1IDM_v6.41....64.dll
windows10-2004-x64
1IDM_v6.41....ll.dll
windows7-x64
1IDM_v6.41....ll.dll
windows10-2004-x64
1IDM_v6.41....64.dll
windows7-x64
4IDM_v6.41....64.dll
windows10-2004-x64
4IDM_v6.41....lp.exe
windows7-x64
1IDM_v6.41....lp.exe
windows10-2004-x64
1IDM_v6.41....CC.dll
windows7-x64
1IDM_v6.41....CC.dll
windows10-2004-x64
1IDM_v6.41....64.dll
windows7-x64
4IDM_v6.41....64.dll
windows10-2004-x64
4IDM_v6.41....64.exe
windows7-x64
1IDM_v6.41....64.exe
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
14-10-2023 01:56
Static task
static1
Behavioral task
behavioral1
Sample
IDM_v6.41.6_Repack/!)卸载.bat
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
IDM_v6.41.6_Repack/!)卸载.bat
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
IDM_v6.41.6_Repack/!)绿化.bat
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
IDM_v6.41.6_Repack/!)绿化.bat
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
background.js
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
background.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
captured.html
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
captured.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
content.js
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
content.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
debug.js
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
debug.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
document.js
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
document.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
welcome.html
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
welcome.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
welcome.js
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
welcome.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
IDM_v6.41.6_Repack/IDMFType64.dll
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
IDM_v6.41.6_Repack/IDMFType64.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
IDM_v6.41.6_Repack/IDMGetAll.dll
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
IDM_v6.41.6_Repack/IDMGetAll.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
IDM_v6.41.6_Repack/IDMGetAll64.dll
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
IDM_v6.41.6_Repack/IDMGetAll64.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
IDM_v6.41.6_Repack/IDMGrHlp.exe
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
IDM_v6.41.6_Repack/IDMGrHlp.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
IDM_v6.41.6_Repack/IDMIECC.dll
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
IDM_v6.41.6_Repack/IDMIECC.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral29
Sample
IDM_v6.41.6_Repack/IDMIECC64.dll
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
IDM_v6.41.6_Repack/IDMIECC64.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral31
Sample
IDM_v6.41.6_Repack/IDMIntegrator64.exe
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
IDM_v6.41.6_Repack/IDMIntegrator64.exe
Resource
win10v2004-20230915-en
General
-
Target
IDM_v6.41.6_Repack/IDMGrHlp.exe
-
Size
507KB
-
MD5
17b96559486f6d9194a4fbee84248257
-
SHA1
f112c3beda5f6ed5debcc9d1dd117623c77384fb
-
SHA256
b3b6281ea820eae8192e50b30698cf4c3b8bc3d4376c978403bc9e18e5857c23
-
SHA512
a16f778f95cc39aa55760b72cd3a37a515a3d04f040f12ef865f8ba1cec3bb574bca97eb6ebd86f78d8235dad27a858e7e3fd6c9b3b87075ab220f6e581c3fd0
-
SSDEEP
12288:B5j7m7bY95bVvxuWxrrv3bE2Xaq78vODPFagF6:3OQvxuWxrfE2Xa9vODdagF6
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3044 IDMGrHlp.exe 3044 IDMGrHlp.exe 3044 IDMGrHlp.exe