0ba3015e77c9848439ee1fb22bdaba27caa73a624d3cc5286adad08c923dea3f

Submit
Reports

Overview

overview

Static

static

replacesetup.exe

windows7-x64

replacesetup.exe

windows10-2004-x64

Clash Pack....1.exe

windows7-x64

Clash Pack....1.exe

windows10-2004-x64

Sinicizati...er.exe

windows7-x64

Sinicizati...er.exe

windows10-2004-x64

$PLUGINSDI...ns.dll

windows7-x64

$PLUGINSDI...ns.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows7-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...gs.dll

windows7-x64

$PLUGINSDI...gs.dll

windows10-2004-x64

asar/linux...�.docx

windows7-x64

asar/linux...�.docx

windows10-2004-x64

Clash-for-...rer.js

windows7-x64

Clash-for-...rer.js

windows10-2004-x64

Clash-for-...ain.js

windows7-x64

Clash-for-...ain.js

windows10-2004-x64

Clash-for-...rer.js

windows7-x64

Clash-for-...rer.js

windows10-2004-x64

简易封�....1.exe

windows7-x64

简易封�....1.exe

windows10-2004-x64

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-02-2024 07:38

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

3 signatures

Behavioral task

behavioral1

Sample

replacesetup.exe

Resource

win7-20240220-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

replacesetup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

Clash Packager/简易封包工具_3.2.0.1.exe

Resource

win7-20240221-en

upx

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Clash Packager/简易封包工具_3.2.0.1.exe

Resource

win10v2004-20240226-en

upx

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

Sinicization/npp.8.1.4.Installer.exe

Resource

win7-20240221-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Sinicization/npp.8.1.4.Installer.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

asar/linux安装asar文件解压打包组件.docx

Resource

win7-20240221-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral14

Sample

asar/linux安装asar文件解压打包组件.docx

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

Clash-for-Windows_Chinese-main/chinese_file/Manual-Chinese/renderer.js

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Clash-for-Windows_Chinese-main/chinese_file/Manual-Chinese/renderer.js

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/main.js

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/main.js

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/renderer.js

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/renderer.js

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

简易封包工具_3.2.0.1.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

简易封包工具_3.2.0.1.exe

Resource

win10v2004-20240226-en

upx

windows10-2004-x64

7 signatures

150 seconds

Report Analysis Logs

General

Target

Clash-for-Windows_Chinese-main/chinese_file/Sinicization_files/main.js
Size

39KB
MD5

03d5c3aa4493b8d14259fb486e133560
SHA1

1a8574050743e87058ab3b06de7bef4cc45d568c
SHA256

1bbb65a35b2eab09eff3b01aaa278403313abf008367b94b19ba311ae03abc0a
SHA512

460d6d11927358ad0525a56bbee1f8de35a23baf64c64c9ab63654c25c0459ed6d0b3dba1a789d940d8010007b0d2347a2342de753f0c40daf66e7404baa1c18
SSDEEP

768:O08bLQmxlKVSuXu6arHWzX7rKWYxq1gQa4NWXBg:O08bLQLVndX7rKWYxLj4D

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Clash-for-Windows_Chinese-main\chinese_file\Sinicization_files\main.js
1⤵
PID:1984

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads