Overview
overview
3Static
static
3alixixi.co...息.js
windows7-x64
1alixixi.co...息.js
windows10-2004-x64
1alixixi.co...at.exe
windows7-x64
1alixixi.co...at.exe
windows10-2004-x64
1alixixi.co...ar.exe
windows7-x64
1alixixi.co...ar.exe
windows10-2004-x64
1conn.vbs
windows7-x64
1conn.vbs
windows10-2004-x64
1dele.vbs
windows7-x64
1dele.vbs
windows10-2004-x64
1deleuser.htm
windows7-x64
1deleuser.htm
windows10-2004-x64
1edit.vbs
windows7-x64
1edit.vbs
windows10-2004-x64
1index.htm
windows7-x64
1index.htm
windows10-2004-x64
1login.vbs
windows7-x64
1login.vbs
windows10-2004-x64
1login.htm
windows7-x64
1login.htm
windows10-2004-x64
1logout.asp
windows7-x64
3logout.asp
windows10-2004-x64
3password.htm
windows7-x64
1password.htm
windows10-2004-x64
1px.vbs
windows7-x64
1px.vbs
windows10-2004-x64
1reload.htm
windows7-x64
1reload.htm
windows10-2004-x64
1update.html
windows7-x64
1update.html
windows10-2004-x64
1alixixi.co...es.dll
windows7-x64
1alixixi.co...es.dll
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30-12-2023 07:41
Static task
static1
Behavioral task
behavioral1
Sample
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/1.85升1.87版升级信息.js
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/1.85升1.87版升级信息.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/iChat.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/iChat.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/iChatNetBar.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/iChatNetBar.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
conn.vbs
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
conn.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
dele.vbs
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
dele.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
deleuser.htm
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
deleuser.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
edit.vbs
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
edit.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
index.htm
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
index.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
login.vbs
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
login.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
login.htm
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
login.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
logout.asp
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
logout.asp
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
password.htm
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
password.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
px.vbs
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
px.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
reload.htm
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
reload.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
update.html
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
update.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/usermgr/ichat_files.dll
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/usermgr/ichat_files.dll
Resource
win10v2004-20231215-en
General
-
Target
alixixi.com/ichat2/ichat2.5正式版的视频聊天室程序/1_85Upgrade1_87/iChatNetBar.exe
-
Size
244KB
-
MD5
3616c10ee4c9d530e53e4da6728c1aeb
-
SHA1
42306056df7be6dd64ebb08f07c30229adb151f8
-
SHA256
7cbe6d6e5a986c38c1e13208d8159dcb2371e31bcecb1732de9fc6072e9bc536
-
SHA512
4739992af75257297fe9806833b4a3eba2c42a4a5f6cc54f4877412b6ad266c07a5f8893ec5112776baed6d91dcd849cf0b25699e2959ccefc9c38e52df4b7bb
-
SSDEEP
3072:APzBOJRtWODDo1kBlra8vmQkaALRdN/f0YdUnWUX0ytG8fQJxm4oiXjVD9janUi:AbgWODDaoagmQkh1nTdr2arVJj
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 2056 iChatNetBar.exe 2056 iChatNetBar.exe 2056 iChatNetBar.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 2056 iChatNetBar.exe 2056 iChatNetBar.exe 2056 iChatNetBar.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2056 iChatNetBar.exe 2056 iChatNetBar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\alixixi.com\ichat2\ichat2.5正式版的视频聊天室程序\1_85Upgrade1_87\iChatNetBar.exe"C:\Users\Admin\AppData\Local\Temp\alixixi.com\ichat2\ichat2.5正式版的视频聊天室程序\1_85Upgrade1_87\iChatNetBar.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2056