Overview
overview
7Static
static
79be9c8988a...fd.exe
windows7-x64
79be9c8988a...fd.exe
windows10-2004-x64
7$PLUGINSDI...rol.js
windows7-x64
1$PLUGINSDI...rol.js
windows10-2004-x64
1$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...ist.js
windows7-x64
1$PLUGINSDI...ist.js
windows10-2004-x64
1$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...nit.js
windows7-x64
1$PLUGINSDI...nit.js
windows10-2004-x64
1$PLUGINSDI...fer.js
windows7-x64
1$PLUGINSDI...fer.js
windows10-2004-x64
1$PLUGINSDI...ge.dll
windows7-x64
3$PLUGINSDI...ge.dll
windows10-2004-x64
3$PLUGINSDI...n12.js
windows7-x64
1$PLUGINSDI...n12.js
windows10-2004-x64
1$PLUGINSDI...ime.js
windows7-x64
1$PLUGINSDI...ime.js
windows10-2004-x64
1$PLUGINSDI...ket.js
windows7-x64
1$PLUGINSDI...ket.js
windows10-2004-x64
1$PLUGINSDI...ftp.js
windows7-x64
1$PLUGINSDI...ftp.js
windows10-2004-x64
1$PLUGINSDI...ttp.js
windows7-x64
1$PLUGINSDI...ttp.js
windows10-2004-x64
1$PLUGINSDI.../tp.js
windows7-x64
1$PLUGINSDI.../tp.js
windows10-2004-x64
1$PLUGINSDI...re.dll
windows7-x64
1$PLUGINSDI...re.dll
windows10-2004-x64
1$PLUGINSDI...re.dll
windows7-x64
1$PLUGINSDI...re.dll
windows10-2004-x64
1Analysis
-
max time kernel
92s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
14-02-2024 14:25
Behavioral task
behavioral1
Sample
9be9c8988ab6bb7cdc044ac413d0c3fd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9be9c8988ab6bb7cdc044ac413d0c3fd.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BrowserControl.js
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BrowserControl.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/DownloadList.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/DownloadList.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/GuiInit.js
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/GuiInit.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/IntegratedOffer.js
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/IntegratedOffer.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/LuaSocket/lua/socket/tp.js
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/LuaSocket/lua/socket/tp.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/LuaSocket/mime/core.dll
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/LuaSocket/mime/core.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/LuaSocket/socket/core.dll
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/LuaSocket/socket/core.dll
Resource
win10v2004-20231215-en
General
-
Target
$PLUGINSDIR/DownloadList.js
-
Size
15KB
-
MD5
f6baeef563055712a41605c5d5a45e22
-
SHA1
e9ff91e02b0d86407946403f17daff9da55b2bd1
-
SHA256
3a0542b947504cb84c9bd348eeb600d58075179c889526f3750d9fc776dc229c
-
SHA512
fb3ef2803364d5c247374f641296a0b3f0d6c67d25fe12c01e5647ae5b9a84bbcdef9cd34fbeff985576ec48528564db8990b0b662eda0a8fa2937def50ca1e0
-
SSDEEP
192:sz4YaYdx2oaQiviapMCImuxijxU6PdrqoV4d4WUJsQa3M3SSpCDGr:suY6AMppu0xUodr6d4pva83SDO
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request196.249.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request189.178.17.96.in-addr.arpaIN PTRResponse189.178.17.96.in-addr.arpaIN PTRa96-17-178-189deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request17.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request28.118.140.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request13.86.106.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request173.178.17.96.in-addr.arpaIN PTRResponse173.178.17.96.in-addr.arpaIN PTRa96-17-178-173deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request11.227.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request175.178.17.96.in-addr.arpaIN PTRResponse175.178.17.96.in-addr.arpaIN PTRa96-17-178-175deploystaticakamaitechnologiescom
-
73 B 147 B 1 1
DNS Request
196.249.167.52.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
189.178.17.96.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
17.160.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
28.118.140.52.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
13.86.106.20.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
206.23.85.13.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
173.178.17.96.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
11.227.111.52.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
175.178.17.96.in-addr.arpa