Overview
overview
7Static
static
7- MuServer...CS.exe
windows7-x64
1- MuServer...CS.exe
windows10-2004-x64
1- MuServer...er.exe
windows7-x64
1- MuServer...er.exe
windows10-2004-x64
1- MuServer...er.exe
windows7-x64
1- MuServer...er.exe
windows10-2004-x64
1- MuServer...UM.dll
windows7-x64
3- MuServer...UM.dll
windows10-2004-x64
3- MuServer...er.exe
windows7-x64
1- MuServer...er.exe
windows10-2004-x64
1- MuServer...er.exe
windows7-x64
1- MuServer...er.exe
windows10-2004-x64
1- MuServer...UM.dll
windows7-x64
3- MuServer...UM.dll
windows10-2004-x64
3- MuServer...db.exe
windows7-x64
1- MuServer...db.exe
windows10-2004-x64
1- MuServer...oc.dll
windows7-x64
3- MuServer...oc.dll
windows10-2004-x64
3- MuServer...ck.dll
windows7-x64
3- MuServer...ck.dll
windows10-2004-x64
3- MuServer...er.exe
windows7-x64
1- MuServer...er.exe
windows10-2004-x64
1- MuServer...Lf.dll
windows7-x64
1- MuServer...Lf.dll
windows10-2004-x64
3- MuServer...sg.dll
windows7-x64
3- MuServer...sg.dll
windows10-2004-x64
3- MuServer...er.exe
windows7-x64
1- MuServer...er.exe
windows10-2004-x64
1- MuServer...ER.exe
windows7-x64
1- MuServer...ER.exe
windows10-2004-x64
1- MuServer...UP.exe
windows7-x64
7- MuServer...UP.exe
windows10-2004-x64
7Analysis
-
max time kernel
165s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04/01/2024, 04:33
Behavioral task
behavioral1
Sample
- MuServer97+99 Viciados/CS/CS.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
- MuServer97+99 Viciados/CS/CS.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
- MuServer97+99 Viciados/DataServer1/Dataserver.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
- MuServer97+99 Viciados/DataServer1/Dataserver.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
- MuServer97+99 Viciados/DataServer1/WZ_AutoUpdater.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
- MuServer97+99 Viciados/DataServer1/WZ_AutoUpdater.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
- MuServer97+99 Viciados/DataServer1/WZ_UM.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
- MuServer97+99 Viciados/DataServer1/WZ_UM.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
- MuServer97+99 Viciados/DataServer2/Dataserver.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
- MuServer97+99 Viciados/DataServer2/Dataserver.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
- MuServer97+99 Viciados/DataServer2/WZ_AutoUpdater.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
- MuServer97+99 Viciados/DataServer2/WZ_AutoUpdater.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
- MuServer97+99 Viciados/DataServer2/WZ_UM.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
- MuServer97+99 Viciados/DataServer2/WZ_UM.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
- MuServer97+99 Viciados/ExDB/Exdb.exe
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
- MuServer97+99 Viciados/ExDB/Exdb.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
- MuServer97+99 Viciados/ExDB/LogProc.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
- MuServer97+99 Viciados/ExDB/LogProc.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
- MuServer97+99 Viciados/ExDB/WZSock.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
- MuServer97+99 Viciados/ExDB/WZSock.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
- MuServer97+99 Viciados/GameServer/GameServer.exe
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
- MuServer97+99 Viciados/GameServer/GameServer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
- MuServer97+99 Viciados/GameServer/WoLf.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
- MuServer97+99 Viciados/GameServer/WoLf.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
- MuServer97+99 Viciados/GameServer/mumsg.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
- MuServer97+99 Viciados/GameServer/mumsg.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
- MuServer97+99 Viciados/JoinServer/JoinServer.exe
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
- MuServer97+99 Viciados/JoinServer/JoinServer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
- MuServer97+99 Viciados/MU2003_EVENT_SERVER/WZ_MU2003_EVENT_SERVER.exe
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
- MuServer97+99 Viciados/MU2003_EVENT_SERVER/WZ_MU2003_EVENT_SERVER.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
- MuServer97+99 Viciados/MUServerStartUP.exe
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
- MuServer97+99 Viciados/MUServerStartUP.exe
Resource
win10v2004-20231215-en
General
-
Target
- MuServer97+99 Viciados/JoinServer/JoinServer.exe
-
Size
712KB
-
MD5
a062308b9d804e3aa99a4e94973b176d
-
SHA1
7d6690e19d6ae48cbd09062fac0fe40d40996bc8
-
SHA256
2c7e902ed3871f2dda57dcbd626b65393c31aa5bb57142659a42b5558ea72017
-
SHA512
b3a9ce238eb0819579aac6c08225ee90ac563401c148c97ab0259c5fbf66b3b8254606ec984b4159d155410322be8e5b4fdf1100a6936093329a1a04b15af0c0
-
SSDEEP
12288:aHiFLH3lwf9yW+wBYEBEebhLyWiCabKiIFadueDKSt4EE:nL6J1LD/abMe+S7E
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2988 JoinServer.exe