Overview
overview
8Static
static
7spymypcpro_trial.exe
windows7-x64
7spymypcpro_trial.exe
windows10-2004-x64
7$PLUGINSDI...ol.dll
windows7-x64
3$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDIR/spy.dll
windows7-x64
3$PLUGINSDIR/spy.dll
windows10-2004-x64
3$_3_.exe
windows7-x64
8$_3_.exe
windows10-2004-x64
8$_4_.dll
windows7-x64
1$_4_.dll
windows10-2004-x64
1$_5_.chm
windows7-x64
1$_5_.chm
windows10-2004-x64
1Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDIR/spy.dll
windows7-x64
3$PLUGINSDIR/spy.dll
windows10-2004-x64
3新云软件.url
windows7-x64
1新云软件.url
windows10-2004-x64
1Analysis
-
max time kernel
137s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25/01/2024, 10:03
Behavioral task
behavioral1
Sample
spymypcpro_trial.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
spymypcpro_trial.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsisFirewall.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsisFirewall.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/spy.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/spy.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$_3_.exe
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
$_3_.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
$_4_.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$_4_.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
$_5_.chm
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
$_5_.chm
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
Uninstall.exe
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
Uninstall.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nsisFirewall.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsisFirewall.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/spy.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/spy.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
新云软件.url
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
新云软件.url
Resource
win10v2004-20231222-en
General
-
Target
$_5_.chm
-
Size
29KB
-
MD5
775da975494cc901d292063126653171
-
SHA1
dcbcfd576932434c27b58d42f407836b26daf1b5
-
SHA256
be2cb9761e9393cc36a72c47f80f3ccf2afb49f6c4c4186e0d762366419f8fe2
-
SHA512
56a5101d33dd780ede1599e432f7bc2576165593bdf28866f2711adfe75e22e1fb52550bc09ed6796b07a052617645392fbab0bae10794ccf6104287dd46c6d5
-
SSDEEP
384:mELLGyqsA9xYm8dKR8gKTCDb6PCanEYpv4kEyQdnmgTe1C2FZNyv:mucTxv8gmgKubLnYpgkEycnmRrNyv
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4792 hh.exe 4792 hh.exe