Overview

overview

7

Static

static

3

8f24ef1371...e7.exe

windows7-x64

1

8f24ef1371...e7.exe

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

client/error.htm

windows7-x64

1

client/error.htm

windows10-2004-x64

1

client/index.html

windows7-x64

1

client/index.html

windows10-2004-x64

1

client/index1.html

windows7-x64

1

client/index1.html

windows10-2004-x64

1

client/index2.html

windows7-x64

1

client/index2.html

windows10-2004-x64

1

client/ok.htm

windows7-x64

1

client/ok.htm

windows10-2004-x64

1

client/view/list.exe

windows7-x64

1

client/view/list.exe

windows10-2004-x64

1

mpvod.exe

windows7-x64

7

mpvod.exe

windows10-2004-x64

7

readme.htm

windows7-x64

1

readme.htm

windows10-2004-x64

1

register.htm

windows7-x64

1

register.htm

windows10-2004-x64

1

repaire.exe

windows7-x64

1

repaire.exe

windows10-2004-x64

1

skinhelp.htm

windows7-x64

1

skinhelp.htm

windows10-2004-x64

1

vodclient.exe

windows7-x64

1

vodclient.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04-02-2024 12:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    vodclient.exe

  • Size

    576KB

  • MD5

    81ebcc79f7e9cb4de01cedcd04b3d9ca

  • SHA1

    319d6f10ffd4c9df0d25e4c1ae941a227202bee4

  • SHA256

    216f984533df9b9bfc0f081388145a229148e3eed661d8af36604842270e350e

  • SHA512

    5d7025436509a0504e377f3ab74fa52308ecfadbd3f519b3b70e1cce54b146ce2282ec849045fcb0a50a2a927b52ea37da683229e470ca19f48f47fb238ff08c

  • SSDEEP

    12288:Y6XmWsSEekE5deJEjAQOKvQWgqfDqyFC4on72BHP3TulbPIe:Y6XVdPdeJEjARWrfmyFCLn83TObA

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 16 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\vodclient.exe
    "C:\Users\Admin\AppData\Local\Temp\vodclient.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1712-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

    Download

  • memory/1712-1-0x0000000000400000-0x00000000005A7000-memory.dmp

    Filesize

    1.7MB

    Download

  • memory/1712-3-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

    Download