0ba3015e77c9848439ee1fb22bdaba27caa73a624d3cc5286adad08c923dea3f

Submit
Reports

Overview

overview

Static

static

replacesetup.exe

windows7-x64

replacesetup.exe

windows10-2004-x64

Clash Pack....1.exe

windows7-x64

Clash Pack....1.exe

windows10-2004-x64

Sinicizati...er.exe

windows7-x64

Sinicizati...er.exe

windows10-2004-x64

$PLUGINSDI...ns.dll

windows7-x64

$PLUGINSDI...ns.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows7-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...gs.dll

windows7-x64

$PLUGINSDI...gs.dll

windows10-2004-x64

asar/linux...�.docx

windows7-x64

asar/linux...�.docx

windows10-2004-x64

Clash-for-...rer.js

windows7-x64

Clash-for-...rer.js

windows10-2004-x64

Clash-for-...ain.js

windows7-x64

Clash-for-...ain.js

windows10-2004-x64

Clash-for-...rer.js

windows7-x64

Clash-for-...rer.js

windows10-2004-x64

简易封�....1.exe

windows7-x64

简易封�....1.exe

windows10-2004-x64

Analysis

max time kernel
147s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
27-02-2024 07:38

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

3 signatures

Behavioral task

behavioral1

Sample

replacesetup.exe

Resource

win7-20240220-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

replacesetup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

Clash Packager/简易封包工具_3.2.0.1.exe

Resource

win7-20240221-en

upx

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Clash Packager/简易封包工具_3.2.0.1.exe

Resource

win10v2004-20240226-en

upx

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

Sinicization/npp.8.1.4.Installer.exe

Resource

win7-20240221-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Sinicization/npp.8.1.4.Installer.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

asar/linux安装asar文件解压打包组件.docx

Resource

win7-20240221-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral14

Sample

asar/linux安装asar文件解压打包组件.docx

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

Clash-for-Windows_Chinese-main/chinese_file/Manual-Chinese/renderer.js

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Clash-for-Windows_Chinese-main/chinese_file/Manual-Chinese/renderer.js

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/main.js

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/main.js

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/renderer.js

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/renderer.js

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

简易封包工具_3.2.0.1.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

简易封包工具_3.2.0.1.exe

Resource

win10v2004-20240226-en

upx

windows10-2004-x64

7 signatures

150 seconds

Report Analysis Logs

General

Target

Clash-for-Windows_Chinese-main/chinese_file/Manual-Chinese/renderer.js
Size

26KB
MD5

ba6935c6d992b71accd5467a09ee7bb3
SHA1

f7a75bacd8600f7cee0a93dc1742eddf22a3bec1
SHA256

cfd0e485438de4cf06d97f3d024847d590b7fd09875ab5bffd7f8051ba0bb86f
SHA512

0828f95465e773907f38ecb6b071c3520b6ea43553418e297124d68663b590325222f499260813dbd2417eebcf72c0a9681c0336a412f699ddf7e9aaf4cddcb5
SSDEEP

384:aQxCrmDU45B9dwEwVjEqXZvEZjoor4ubFKvqGX3fj+pK0W/Lth/EcuaBD/B9ZVlG:LxvBFdINYj/k6whjf/EcnB99n3A

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Clash-for-Windows_Chinese-main\chinese_file\Manual-Chinese\renderer.js
1⤵
PID:552

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads