d26c17e05042b098fa7d3d62ee0e8aa7840e1fb9da15e9491778f4411f41a146

Login
Reports

Overview

overview

Static

static

Новая...dr.mbn

windows10-1703-x64

Новая...dm.sys

windows10-1703-x64

Новая...ev.sys

windows10-1703-x64

Новая...om.sys

windows10-1703-x64

Новая...al.sys

windows10-1703-x64

Новая...er.sys

windows10-1703-x64

Новая...r2.dll

windows10-1703-x64

Новая...09.dll

windows10-1703-x64

Новая...rv.sys

windows10-1703-x64

Новая...er.sys

windows10-1703-x64

Новая...ev.sys

windows10-1703-x64

Новая...dm.sys

windows10-1703-x64

Новая...ev.sys

windows10-1703-x64

Новая...om.sys

windows10-1703-x64

Новая...al.sys

windows10-1703-x64

Новая...er.sys

windows10-1703-x64

Новая...r2.dll

windows10-1703-x64

Новая...ll.exe

windows10-1703-x64

Новая...�.docx

windows10-1703-x64

Новая...ce.dll

windows10-1703-x64

Новая...rt.doc

windows10-1703-x64

Новая...db.exe

windows10-1703-x64

Новая...dr.mbn

windows10-1703-x64

Новая...dr.mbn

windows10-1703-x64

Новая...dr.mbn

windows10-1703-x64

Новая...dr.mbn

windows10-1703-x64

Новая...en.exe

windows10-1703-x64

Новая...dr.mbn

windows10-1703-x64

Новая...dr.mbn

windows10-1703-x64

Новая...dr.elf

windows10-1703-x64

Новая...dr.elf

windows10-1703-x64

Новая...dr.elf

windows10-1703-x64

Analysis

max time kernel
308s
max time network
1582s
platform
windows10-1703_x64
resource
win10-20231215-en
resource tags

arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
submitted
23/12/2023, 08:11

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

vmprotect

Behavioral task

behavioral1

Sample

Новая папка/2.60/date/3_emmc_ddr.mbn

Resource

win10-20231215-en

windows10-1703-x64

15 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Новая папка/2.60/date/android/Driver/X64/hw_quusbmdm.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Новая папка/2.60/date/android/Driver/X64/hw_usbdev.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Новая папка/2.60/date/android/Driver/X64/hw_usbvcom.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Новая папка/2.60/date/android/Driver/X64/qu_usb_serial.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Новая папка/2.60/date/android/Driver/X64/usbser.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Новая папка/2.60/date/android/Driver/X64/winusbcoinstaller2.dll

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Новая папка/2.60/date/android/Driver/X86/WdfCoInstaller01009.dll

Resource

win10-20231215-en

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Новая папка/2.60/date/android/Driver/X86/diagswitchdrv.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Новая папка/2.60/date/android/Driver/X86/ew_usbccgpfilter.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Новая папка/2.60/date/android/Driver/X86/hw_ctrlfakedev.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Новая папка/2.60/date/android/Driver/X86/hw_quusbmdm.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Новая папка/2.60/date/android/Driver/X86/hw_usbdev.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Новая папка/2.60/date/android/Driver/X86/hw_usbvcom.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Новая папка/2.60/date/android/Driver/X86/qu_usb_serial.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Новая папка/2.60/date/android/Driver/X86/usbser.sys

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Новая папка/2.60/date/android/Driver/X86/winusbcoinstaller2.dll

Resource

win10-20231215-en

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Новая папка/2.60/date/android/DriverUninstall.exe

Resource

win10-20231215-en

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Новая папка/2.60/date/android/HandSet ProductLine 2.01.02.00版本配套表.docx

Resource

win10-20231215-en

windows10-1703-x64

4 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Новая папка/2.60/date/android/LocateDevice.dll

Resource

win10-20231215-en

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Новая папка/2.60/date/android/USB-Driver C00B101 Virus Scan Report.doc

Resource

win10-20231215-en

windows10-1703-x64

4 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Новая папка/2.60/date/android/adb.exe

Resource

win10-20231215-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Новая папка/2.60/date/hm4_gp_emmc_ddr.mbn

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Новая папка/2.60/date/hm4_pt_emmc_ddr.mbn

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral25

Sample

Новая папка/2.60/date/hm4a_emmc_ddr.mbn

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral26

Sample

Новая папка/2.60/date/hm_note3_emmc_ddr.mbn

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral27

Sample

Новая папка/2.60/date/hw_tool_en.exe

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

vmprotect

Behavioral task

behavioral28

Sample

Новая папка/2.60/date/max_gp_emmc_ddr.mbn

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral29

Sample

Новая папка/2.60/date/max_pt_emmc_ddr.mbn

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral30

Sample

Новая папка/2.60/date/mi5_ufs_ddr.elf

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral31

Sample

Новая папка/2.60/date/mi5s_ufs_ddr.elf

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral32

Sample

Новая папка/2.60/date/mix_ufs_ddr.elf

Resource

win10-20231215-en

windows10-1703-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target
Новая папка/2.60/date/android/Driver/X86/diagswitchdrv.sys
Size 100KB
Sample231223-j3n4kshah2
SHA256 5827b2350e9efa7542da5b62b283d5f53d17c19f0eb480fafcbebed7f78ab4e6
MD5 96b8c6dd67fb6d9073bcf3492c8f85ae
SHA1 d90e999831172f811fb6c5eb6563856541b8fa06
SHA512 efb18e652af0bda5c73e02aafdc53929ab699313b555920333fdbcc307eb493f3af341429d56bc7e3f30f0116c765422f0723043f6bb361fa14f2ee38a34001b
SSDEEP 1536:KcYkP+Jxd43WfiZJLSydWlSqaLuDIYQRh9mGS5iFI:KGP+fdzYJLSRlzFI/RK5F
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Новая папка\2.60\date\android\Driver\X86\diagswitchdrv.sys"
1⤵
PID:2216
- C:\Users\Admin\AppData\Local\Temp\Новая папка\2.60\date\android\Driver\X86\diagswitchdrv.sys
  "C:\Users\Admin\AppData\Local\Temp\Новая папка\2.60\date\android\Driver\X86\diagswitchdrv.sys"
  2⤵
  PID:3864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3864-0-0x0000000000010000-0x0000000000029200-memory.dmp

Download