Overview
overview
7Static
static
7FSMaxView/...ns.dll
windows7-x64
1FSMaxView/...ns.dll
windows10-2004-x64
1FSMaxView/MaxView.exe
windows7-x64
3FSMaxView/MaxView.exe
windows10-2004-x64
3FSMaxView/...01.dll
windows7-x64
1FSMaxView/...01.dll
windows10-2004-x64
1FSMaxView/...02.exe
windows7-x64
1FSMaxView/...02.exe
windows10-2004-x64
1FSMaxView/...��.url
windows7-x64
1FSMaxView/...��.url
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
04/03/2024, 21:47
Behavioral task
behavioral1
Sample
FSMaxView/FSMVIcons.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
FSMaxView/FSMVIcons.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
FSMaxView/MaxView.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
FSMaxView/MaxView.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
FSMaxView/fsplugin01.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
FSMaxView/fsplugin01.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
FSMaxView/fsplugin02.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
FSMaxView/fsplugin02.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
FSMaxView/新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
FSMaxView/新云软件.url
Resource
win10v2004-20240226-en
General
-
Target
FSMaxView/fsplugin01.dll
-
Size
357KB
-
MD5
0ee59b3adbf3efcb48215f4cd089200e
-
SHA1
22d1f047213e99f1cbbdc26c6a8878b3785f2652
-
SHA256
4f0fcb75aaeb4d25d075fb01ee55d8c6cb18f30aae40bc0d914af05c518f8b84
-
SHA512
8ab61590d03a35143f425ab22a9a71b05ca5002f4358d36abc70ec5d798687ceb495092b79676ec903cb46350611b819e9696aab3c929ea357a58fa319498b82
-
SSDEEP
6144:7Paly7XiaHTV66Lik/kR48WC9149rAstoKN5zpXwkV5cEsEcch65i:7yoriaH53RkRhWC9C9rwuVmXE965
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4864 wrote to memory of 4288 4864 rundll32.exe 87 PID 4864 wrote to memory of 4288 4864 rundll32.exe 87 PID 4864 wrote to memory of 4288 4864 rundll32.exe 87