Overview
overview
7Static
static
3ha_PowerDa...rt.exe
windows7-x64
1ha_PowerDa...rt.exe
windows10-2004-x64
1ha_PowerDa...us.dll
windows7-x64
3ha_PowerDa...us.dll
windows10-2004-x64
3ha_PowerDa...x.html
windows7-x64
1ha_PowerDa...x.html
windows10-2004-x64
1ha_PowerDa...5 .exe
windows7-x64
7ha_PowerDa...5 .exe
windows10-2004-x64
7Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 03:00
Static task
static1
Behavioral task
behavioral1
Sample
ha_PowerDataRecovery/BugReport.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ha_PowerDataRecovery/BugReport.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
ha_PowerDataRecovery/GdiPlus.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
ha_PowerDataRecovery/GdiPlus.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ha_PowerDataRecovery/Help/English/index.html
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
ha_PowerDataRecovery/Help/English/index.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
ha_PowerDataRecovery/硬盘数据恢复软件 V6.5 .exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
ha_PowerDataRecovery/硬盘数据恢复软件 V6.5 .exe
Resource
win10v2004-20231215-en
General
-
Target
ha_PowerDataRecovery/BugReport.exe
-
Size
240KB
-
MD5
9582a1e1cb8b21f7780c6061188230e6
-
SHA1
3c6d62c70b633e1f505644bad90e37bff33012c5
-
SHA256
24c4582ef333f3744f1335f5262c1fb95f2a4d103f53d6da9d1e1d0d32b425a5
-
SHA512
298ad71c1c39e030439be5aa4c68bdc05e2538e52fa81fed79912e8ff9036cf1e263758e4dabbb78e7a8a2deecafd587a76c2fe54fdaee608b322bfdf05f1231
-
SSDEEP
3072:hpTd3V5KBDeN8NrZCQjDVb2CPWspfaX5Rq2hdeRZQthUU3Bp2oNlBKPnD:vTlViNrZCaF28hlk5Rq2eZ5YWP
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1680 BugReport.exe 1680 BugReport.exe 1680 BugReport.exe 1680 BugReport.exe