Overview
overview
7Static
static
3wokwinlm/Msvbvm60.dll
windows7-x64
1wokwinlm/Msvbvm60.dll
windows10-2004-x64
1wokwinlm/Vb6chs.dll
windows7-x64
1wokwinlm/Vb6chs.dll
windows10-2004-x64
1wokwinlm/W...Lm.exe
windows7-x64
7wokwinlm/W...Lm.exe
windows10-2004-x64
7wokwinlm/W...��.doc
windows7-x64
4wokwinlm/W...��.doc
windows10-2004-x64
1wokwinlm/W...��.doc
windows7-x64
4wokwinlm/W...��.doc
windows10-2004-x64
1wokwinlm/system.exe
windows7-x64
1wokwinlm/system.exe
windows10-2004-x64
1wokwinlm/w...rk.dll
windows7-x64
1wokwinlm/w...rk.dll
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 23:10
Static task
static1
Behavioral task
behavioral1
Sample
wokwinlm/Msvbvm60.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
wokwinlm/Msvbvm60.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
wokwinlm/Vb6chs.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
wokwinlm/Vb6chs.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
wokwinlm/WorkWinLm.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
wokwinlm/WorkWinLm.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
wokwinlm/WorkWin限制专家报价单.doc
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
wokwinlm/WorkWin限制专家报价单.doc
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
wokwinlm/WorkWin限制专家白皮书.doc
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
wokwinlm/WorkWin限制专家白皮书.doc
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
wokwinlm/system.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
wokwinlm/system.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
wokwinlm/windlwork.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
wokwinlm/windlwork.dll
Resource
win10v2004-20231215-en
General
-
Target
wokwinlm/system.exe
-
Size
24KB
-
MD5
8721c654fbdd23d333149d49d484e04a
-
SHA1
13684d54692e30fd7b6e81555473b55cd3f50c35
-
SHA256
2f359114a2763556a3cba3ff8ff3cb860ea40cccec62abcdc1a200786610fc8f
-
SHA512
24c999c13623130861e01ef1cd510d99a528935e0e9672ffcff3bcf345ea9c9b044f71a028b61194158054167ec486a80115bf48bb68bc1c8c2a6a2647c9205f
-
SSDEEP
192:wnODov+XKaNr7y8T2M3II0FOyz6u7XioBXZPmP9rqh87LEsYNDsSuPwZu10v+:wvSrgI0FO4/7i/9rhfEsYNDsSuB
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2952 system.exe