Overview
overview
3Static
static
38b1d9cd042...3c.exe
windows7-x64
38b1d9cd042...3c.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$R0.dll
windows7-x64
1$R0.dll
windows10-2004-x64
1$TEMP/CloudAssist.exe
windows7-x64
1$TEMP/CloudAssist.exe
windows10-2004-x64
1$TEMP/CloudServer.exe
windows7-x64
1$TEMP/CloudServer.exe
windows10-2004-x64
1$TEMP/Clou...ee.exe
windows7-x64
1$TEMP/Clou...ee.exe
windows10-2004-x64
17zxr.dll
windows7-x64
17zxr.dll
windows10-2004-x64
1CloudAssist.exe
windows7-x64
1CloudAssist.exe
windows10-2004-x64
1CloudEBookReader.exe
windows7-x64
3CloudEBookReader.exe
windows10-2004-x64
3CloudFun.dll
windows7-x64
1CloudFun.dll
windows10-2004-x64
1CloudFun2.dll
windows7-x64
1CloudFun2.dll
windows10-2004-x64
1CloudServer.exe
windows7-x64
CloudServer.exe
windows10-2004-x64
GdiPlus.dll
windows7-x64
1GdiPlus.dll
windows10-2004-x64
1LongRADrv.sys
windows7-x64
1LongRADrv.sys
windows10-2004-x64
1LongRADrv2K.sys
windows7-x64
1LongRADrv2K.sys
windows10-2004-x64
1LongRAShell.exe
windows7-x64
1LongRAShell.exe
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
03/02/2024, 02:07
Static task
static1
Behavioral task
behavioral1
Sample
8b1d9cd042c4f17030881d1fadc6cd3c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b1d9cd042c4f17030881d1fadc6cd3c.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$R0.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$R0.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$TEMP/CloudAssist.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$TEMP/CloudAssist.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$TEMP/CloudServer.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$TEMP/CloudServer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$TEMP/CloudTool-uusee.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$TEMP/CloudTool-uusee.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
7zxr.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
7zxr.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
CloudAssist.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
CloudAssist.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
CloudEBookReader.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
CloudEBookReader.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
CloudFun.dll
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
CloudFun.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
CloudFun2.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
CloudFun2.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
CloudServer.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
CloudServer.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
GdiPlus.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
GdiPlus.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
LongRADrv.sys
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
LongRADrv.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
LongRADrv2K.sys
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
LongRADrv2K.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
LongRAShell.exe
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
LongRAShell.exe
Resource
win10v2004-20231215-en
General
-
Target
$TEMP/CloudServer.exe
-
Size
176KB
-
MD5
fc139233aae71b902c11e8454a48d1c9
-
SHA1
2fd6aed4c084d5f53e068200b97184ec0254f7f6
-
SHA256
75fa2b819c3aa5a518d97d3a0b98eb24a5cf5022645dea8bdbed9a22c0e82856
-
SHA512
2e8d65ae634cc13c23fca7c671629eab34822acaa62093c13ea6781094fb5e0e7771475bd311ef50a006fa22c0b4e91b912a019cf9e8167465bddc0bdc61f735
-
SSDEEP
3072:BOj7l7Ch+A6jn1j8pVv1v7inrOk6nAiAd0moymRyJqXVFvyz:YHl7e3Ip61JyD4AiAOmoymRRlFqz
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2372 CloudServer.exe