Overview
overview
8Static
static
3EasyMC_Set...64.exe
windows7-x64
7EasyMC_Set...64.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
37zip/linux/x64/7za
ubuntu-18.04-amd64
37zip/mac/x64/7za
macos-10.15-amd64
17zip/win/ia32/7za.exe
windows7-x64
17zip/win/ia32/7za.exe
windows10-2004-x64
17zip/win/x64/7za.exe
windows7-x64
17zip/win/x64/7za.exe
windows10-2004-x64
1EasyMC Launcher.exe
windows7-x64
7EasyMC Launcher.exe
windows10-2004-x64
7LICENSES.c...m.html
windows7-x64
1LICENSES.c...m.html
windows10-2004-x64
1d3dcompiler_47.dll
windows7-x64
1d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
1hostsremov...er.exe
windows7-x64
8hostsremov...er.exe
windows10-2004-x64
8libEGL.dll
windows7-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows7-x64
1libGLESv2.dll
windows10-2004-x64
1resources/elevate.exe
windows7-x64
1resources/elevate.exe
windows10-2004-x64
1Analysis
-
max time kernel
3s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231222-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231222-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
02/02/2024, 01:01
Static task
static1
Behavioral task
behavioral1
Sample
EasyMC_Setup_v1.6.14_x64.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
EasyMC_Setup_v1.6.14_x64.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
7zip/linux/x64/7za
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral12
Sample
7zip/mac/x64/7za
Resource
macos-20231201-en
Behavioral task
behavioral13
Sample
7zip/win/ia32/7za.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
7zip/win/ia32/7za.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
7zip/win/x64/7za.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
7zip/win/x64/7za.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
EasyMC Launcher.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
EasyMC Launcher.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
LICENSES.chromium.html
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
LICENSES.chromium.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
d3dcompiler_47.dll
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
d3dcompiler_47.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
ffmpeg.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
ffmpeg.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
hostsremover/EasyMCHostsRemover.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
hostsremover/EasyMCHostsRemover.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
libEGL.dll
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
libEGL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
libGLESv2.dll
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
libGLESv2.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
resources/elevate.exe
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
resources/elevate.exe
Resource
win10v2004-20231215-en
General
-
Target
7zip/linux/x64/7za
-
Size
1.4MB
-
MD5
6a2e4039a2f56265369f22ecb1a19fd5
-
SHA1
b0ea59484a4827d7d9a0a27a5270310ef07e61a8
-
SHA256
afc9448bd0cc2eeda131cce313ef4994f9656417e0a15c8465fcda9ca859b280
-
SHA512
796188635271cbd7dbd6a7f37cb4d4d5b394c8a302dc62008c40b4be507382925eeb8a550ca11e81c791d5dbda238f95dedecbdd0daddf84907c4fa3a9b1ca59
-
SSDEEP
24576:Z3qW/EbABBtyz89OfxvH7WlwAMEd2rZXTN9H8lBFwEP:Z3zEbO3a7ucjN9HUwE
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/devices/system/cpu 7za