Overview
overview
3Static
static
38b1d9cd042...3c.exe
windows7-x64
38b1d9cd042...3c.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$R0.dll
windows7-x64
1$R0.dll
windows10-2004-x64
1$TEMP/CloudAssist.exe
windows7-x64
1$TEMP/CloudAssist.exe
windows10-2004-x64
1$TEMP/CloudServer.exe
windows7-x64
1$TEMP/CloudServer.exe
windows10-2004-x64
1$TEMP/Clou...ee.exe
windows7-x64
1$TEMP/Clou...ee.exe
windows10-2004-x64
17zxr.dll
windows7-x64
17zxr.dll
windows10-2004-x64
1CloudAssist.exe
windows7-x64
1CloudAssist.exe
windows10-2004-x64
1CloudEBookReader.exe
windows7-x64
3CloudEBookReader.exe
windows10-2004-x64
3CloudFun.dll
windows7-x64
1CloudFun.dll
windows10-2004-x64
1CloudFun2.dll
windows7-x64
1CloudFun2.dll
windows10-2004-x64
1CloudServer.exe
windows7-x64
CloudServer.exe
windows10-2004-x64
GdiPlus.dll
windows7-x64
1GdiPlus.dll
windows10-2004-x64
1LongRADrv.sys
windows7-x64
1LongRADrv.sys
windows10-2004-x64
1LongRADrv2K.sys
windows7-x64
1LongRADrv2K.sys
windows10-2004-x64
1LongRAShell.exe
windows7-x64
1LongRAShell.exe
windows10-2004-x64
1General
-
Target
8b1d9cd042c4f17030881d1fadc6cd3c
-
Size
1.7MB
-
Sample
240203-ckd3bsedg9
-
MD5
8b1d9cd042c4f17030881d1fadc6cd3c
-
SHA1
158ea5baefe6b12d217900871a8ec8774397e045
-
SHA256
dc9004debeedaf630fc537b2200ce3a742a45af5478cecf2fccdd35ffa15cac5
-
SHA512
306d9804616d04c9d832a4d1b75aa9c120dc6ad38fedc23c014f54440fec3c715f758f600d279674a043c5847bf8318b50d7fe258b304c978d7c3f470db860d5
-
SSDEEP
49152:te3T0qUm3ZxLTqW1Xnmg548HORd3qHyQLymsPLr:EPUUTquXmg5482IyaymqLr
Static task
static1
Behavioral task
behavioral1
Sample
8b1d9cd042c4f17030881d1fadc6cd3c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b1d9cd042c4f17030881d1fadc6cd3c.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$R0.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$R0.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$TEMP/CloudAssist.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$TEMP/CloudAssist.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$TEMP/CloudServer.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$TEMP/CloudServer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$TEMP/CloudTool-uusee.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$TEMP/CloudTool-uusee.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
7zxr.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
7zxr.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
CloudAssist.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
CloudAssist.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
CloudEBookReader.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
CloudEBookReader.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
CloudFun.dll
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
CloudFun.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
CloudFun2.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
CloudFun2.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
CloudServer.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
CloudServer.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
GdiPlus.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
GdiPlus.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
LongRADrv.sys
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
LongRADrv.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
LongRADrv2K.sys
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
LongRADrv2K.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
LongRAShell.exe
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
LongRAShell.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
8b1d9cd042c4f17030881d1fadc6cd3c
-
Size
1.7MB
-
MD5
8b1d9cd042c4f17030881d1fadc6cd3c
-
SHA1
158ea5baefe6b12d217900871a8ec8774397e045
-
SHA256
dc9004debeedaf630fc537b2200ce3a742a45af5478cecf2fccdd35ffa15cac5
-
SHA512
306d9804616d04c9d832a4d1b75aa9c120dc6ad38fedc23c014f54440fec3c715f758f600d279674a043c5847bf8318b50d7fe258b304c978d7c3f470db860d5
-
SSDEEP
49152:te3T0qUm3ZxLTqW1Xnmg548HORd3qHyQLymsPLr:EPUUTquXmg5482IyaymqLr
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781
-
SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f
-
SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
-
SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
-
SSDEEP
192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score3/10 -
-
-
Target
$R0
-
Size
48KB
-
MD5
4c494d8cf201b203179f72f6326a6b2e
-
SHA1
86936c53fe8ba36372be69f6cff6aa75bd8bf890
-
SHA256
0599b016d27e85ceb73f8eebf440ecc04eee03d1eae2bd8cdbaaed80e57f5feb
-
SHA512
f84d935453c2eb225093582f49a03d70743cc8b849899869b0c4a06a688be857a5fec61dff78503883b3cdb8c25276b007e91a777036a62e38de61c3f8739ceb
-
SSDEEP
768:6+SrZq6TnZYlo/EkFah0+xt+hJawnjMnuYUw4sC+SirO9:7SrZq6DnzFG2JawjMuYUnsC+SirO9
Score1/10 -
-
-
Target
$TEMP/CloudAssist.exe
-
Size
48KB
-
MD5
fe3c977ab753bba0c0d7e0c90aaf2625
-
SHA1
b9c30d98eeec285703d8dfe004a585fdc86abc5a
-
SHA256
598256d775d8739432991eb55499ae284393ab393000d4315eaf0db5adb8662d
-
SHA512
931f735fc7ccea9197d77f5eae7ee1f5fb4563765a8716d76b1c60dd577a39e29b775812a1d8bbafcf9c40b52a96292d9ade3372075d020fdfa76df9251c1ab6
-
SSDEEP
768:+TrerodUfpj4LdVi49IGmJXelABC+SiBF+n:tt4LdVv9PmglABC+SiBF+n
Score1/10 -
-
-
Target
$TEMP/CloudServer.exe
-
Size
176KB
-
MD5
fc139233aae71b902c11e8454a48d1c9
-
SHA1
2fd6aed4c084d5f53e068200b97184ec0254f7f6
-
SHA256
75fa2b819c3aa5a518d97d3a0b98eb24a5cf5022645dea8bdbed9a22c0e82856
-
SHA512
2e8d65ae634cc13c23fca7c671629eab34822acaa62093c13ea6781094fb5e0e7771475bd311ef50a006fa22c0b4e91b912a019cf9e8167465bddc0bdc61f735
-
SSDEEP
3072:BOj7l7Ch+A6jn1j8pVv1v7inrOk6nAiAd0moymRyJqXVFvyz:YHl7e3Ip61JyD4AiAOmoymRRlFqz
Score1/10 -
-
-
Target
$TEMP/CloudTool-uusee.exe
-
Size
72KB
-
MD5
be3d32e39c018cdb3da4aaa9eeb4a437
-
SHA1
49b7aec458f3033b6f758d192e077e49c56a6143
-
SHA256
2cc5fea6b910d60e3ec0bfcea88b82efb90c73990489a5095aeb989c9ba9ec4a
-
SHA512
4f126b26ddb9fbb4dc8ccbd002e9685fbf67615a2abe1a236b6d5ca4930de903393cf2d1c931695661917630c9d724c39cf15394a1aceda6c342de56735bcacd
-
SSDEEP
1536:zPN2JSk3/ZdTPnCpunxitzwLNhu2YSrQUJC+Siggds:h2Qk3/jDHnsuqRSrQUfZs
Score1/10 -
-
-
Target
7zxr.dll
-
Size
174KB
-
MD5
60e5b6e38c5a7225010a0951d0415256
-
SHA1
8cee8406ddd6bb7f000b55c8a47917235584bc15
-
SHA256
91f1a159c1370dc59a2a2dd04b12b43acc3c604a77679828c957e8c410b4908b
-
SHA512
79883b53f8d5f8334bc5d0ad294ecd4a21d1809a8376ccf3465479d0573f29c679cf13b63eaac385708408d55e24e34ca455f81946a10e3b86132c955ec13f87
-
SSDEEP
3072:KGDS83HETDdNM6TMOHt40qTrGJc5uIruEkLPTjDR7TDTjFCnyUWvcmq5WzVo:KGhHETD3FTMI673Z527TjDRnvjFGyUWs
Score1/10 -
-
-
Target
CloudAssist.exe
-
Size
48KB
-
MD5
fe3c977ab753bba0c0d7e0c90aaf2625
-
SHA1
b9c30d98eeec285703d8dfe004a585fdc86abc5a
-
SHA256
598256d775d8739432991eb55499ae284393ab393000d4315eaf0db5adb8662d
-
SHA512
931f735fc7ccea9197d77f5eae7ee1f5fb4563765a8716d76b1c60dd577a39e29b775812a1d8bbafcf9c40b52a96292d9ade3372075d020fdfa76df9251c1ab6
-
SSDEEP
768:+TrerodUfpj4LdVi49IGmJXelABC+SiBF+n:tt4LdVv9PmglABC+SiBF+n
Score1/10 -
-
-
Target
CloudEBookReader.exe
-
Size
364KB
-
MD5
0133a3d0edd09bbb66d231f35a8d0917
-
SHA1
38390dd49db23d19da4a1ae4c5114b757bfb7532
-
SHA256
0a6f82fcf02e8571aa6c80f3c6e0125a603bd6aa52f45ffa227a713409a0e7da
-
SHA512
af9aa5a158937aec03ffd2dbe6b9dd47ae04cf22ca22bb3ee488d96ab1c1983205dce3a45528cc435170aba7c5742a3309d68686dab91e088b774a561e87ef4d
-
SSDEEP
3072:rCh+jAstQsJEGGX0C3/mlHB/7777JeeeQX1111111t3/12YOxt6wmj7:rvAstQsJhy3+lHx1111111N12YOxUw87
Score3/10 -
-
-
Target
CloudFun.dll
-
Size
48KB
-
MD5
b0c680e831041e78f2d2fbcc497e094d
-
SHA1
d8df5b6a002d4961187fcac3ff85faa7b27a09fe
-
SHA256
243f6749d733159c7460c9bd1c546703dfb027bc8f9da7794b0c43a0d328f26c
-
SHA512
038d168c4c634860b86106e393dc4185dfa31e36e1e0bedc04a9ab773d040f3f278eb736e4ca064855a6b5758da15d95116d4d0d00761fc87212d061000ff59a
-
SSDEEP
768:UyarZq6BnZGlyH72VScFN+Mut+hJawnjnEcUFhC+Si02mc:parZq6d77GL722JawjnEcUFhC+Si02Z
Score1/10 -
-
-
Target
CloudFun2.dll
-
Size
48KB
-
MD5
4c494d8cf201b203179f72f6326a6b2e
-
SHA1
86936c53fe8ba36372be69f6cff6aa75bd8bf890
-
SHA256
0599b016d27e85ceb73f8eebf440ecc04eee03d1eae2bd8cdbaaed80e57f5feb
-
SHA512
f84d935453c2eb225093582f49a03d70743cc8b849899869b0c4a06a688be857a5fec61dff78503883b3cdb8c25276b007e91a777036a62e38de61c3f8739ceb
-
SSDEEP
768:6+SrZq6TnZYlo/EkFah0+xt+hJawnjMnuYUw4sC+SirO9:7SrZq6DnzFG2JawjMuYUnsC+SirO9
Score1/10 -
-
-
Target
CloudServer.exe
-
Size
176KB
-
MD5
fc139233aae71b902c11e8454a48d1c9
-
SHA1
2fd6aed4c084d5f53e068200b97184ec0254f7f6
-
SHA256
75fa2b819c3aa5a518d97d3a0b98eb24a5cf5022645dea8bdbed9a22c0e82856
-
SHA512
2e8d65ae634cc13c23fca7c671629eab34822acaa62093c13ea6781094fb5e0e7771475bd311ef50a006fa22c0b4e91b912a019cf9e8167465bddc0bdc61f735
-
SSDEEP
3072:BOj7l7Ch+A6jn1j8pVv1v7inrOk6nAiAd0moymRyJqXVFvyz:YHl7e3Ip61JyD4AiAOmoymRRlFqz
Score1/10 -
-
-
Target
GdiPlus.dll
-
Size
515KB
-
MD5
3133fef84d83f4b1cf0ff257931dff46
-
SHA1
684331eca818a5d3f60434feac8eb1a2ebb3625f
-
SHA256
f6e9e45d278250fe9e927140b1398cdb0921dd8061f6a0980302b01fffaa5dd9
-
SHA512
afc8d47fc6f8a3d97a3059313f83941b29318e9ae26120eeb68040db30ec1381235ef39d7ee92c384063925fd533b586925cf2e202405adc2b70f77571f76eb6
-
SSDEEP
6144:1cvvml0UWWQK9gK3N6gJqsu66+Yv17LoVxfZ22hPWf9E1GU2KwEdsjGIv6iSc7d2:1gvjZoI517UvgeOf28UW16iSc7dn2
Score1/10 -
-
-
Target
LongRADrv.sys
-
Size
76KB
-
MD5
1b2c44717269ff8c50d364dc3a1d90b1
-
SHA1
121ec03318b111d6b466248e724ec6d96ef74ef1
-
SHA256
cc936cd4d2bb5873efbb0fcf79ed8a1217b6c7995e495aad04e482836520003f
-
SHA512
426ec82195c24b5d00ae0a01e7b0e203107dc1a3b4e259de5ff75d2eb0e9ec5661ab04b15070e4f625320d252917fc59908c2aa7864eca1c86c1a2495a52cd0f
-
SSDEEP
1536:S4zF4jmVsyuoFAM2Krns9TPtmZFWY16E+xV82VmC+SiyON:gj5oFmK+PeJoC2VU1
Score1/10 -
-
-
Target
LongRADrv2K.sys
-
Size
88KB
-
MD5
a725beb8730339eab668aaf4b9eb6f3d
-
SHA1
f8350fba49c9d39fd0f30104b3f27b8ecc177c12
-
SHA256
7151669323558de79a34a6427d4470b1d47fd38d614114b1007a3d101183a32b
-
SHA512
aca165474d4c2b77ab84abe761911bf94cb44fcbf5f098eb3761e949bffcdb765b6db86f2e561615b6c28bb4aa0f9459d1e8e45d0efb42ff014e912d705c9867
-
SSDEEP
1536:vcfZs0xy9tcuOg5pC9JMyEUgTjjIKm9pAdvz7ZOGnKn/hnnbuukyoiyWMC+SiX+r:0y9CuHXC9JMCgTgVfKgtGyoitW8
Score1/10 -
-
-
Target
LongRAShell.exe
-
Size
48KB
-
MD5
61af3cd5928c7218639195aef01cea6a
-
SHA1
a05ccfe619a4a2af9f86032b9c844e2a667136b1
-
SHA256
2f56c64ddca2fc62aef7823469ebf14004c057196353bcb8555e1e109d4c80ae
-
SHA512
28a89755150bc203d626e74d8fceeb1dcf8316eff4c8d9475985e9bd45fb2981673ed61acd6ecf9b18682845fa0730eae7fe064232706b6dd8d7e8d9d42beebf
-
SSDEEP
768:WESTRgXQ940O4lCc+XUQpROCXQIlivC+SiQRj6:WL6XD4lL+XUQpRjlivC+Siwj6
Score1/10 -