Overview
overview
7Static
static
7MirServer/...er.exe
windows7-x64
1MirServer/...er.exe
windows10-2004-x64
1MirServer/...er.exe
windows7-x64
1MirServer/...er.exe
windows10-2004-x64
1MirServer/...er.exe
windows7-x64
7MirServer/...er.exe
windows10-2004-x64
7MirServer/...t.html
windows7-x64
1MirServer/...t.html
windows10-2004-x64
1MirServer/...te.exe
windows7-x64
1MirServer/...te.exe
windows10-2004-x64
1MirServer/...rv.exe
windows7-x64
1MirServer/...rv.exe
windows10-2004-x64
1MirServer/...TL.dll
windows7-x64
1MirServer/...TL.dll
windows10-2004-x64
1推荐服�...��.htm
windows7-x64
1推荐服�...��.htm
windows10-2004-x64
1Analysis
- max time kernel
152s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
05/03/2024, 13:34
Behavioral task
behavioral1
Sample
MirServer/DBServer/DBServer.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
MirServer/DBServer/DBServer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
MirServer/GameCenter.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
MirServer/GameCenter.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
MirServer/LogServer/LogDataServer.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
MirServer/LogServer/LogDataServer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
MirServer/LoginGate/IpList.html
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
MirServer/LoginGate/IpList.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
MirServer/LoginGate/LoginGate.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
MirServer/LoginGate/LoginGate.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
MirServer/LoginSrv/LoginSrv.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
MirServer/LoginSrv/LoginSrv.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
MirServer/Mir200/Envir/QuestDiary/16sky.com/牛牛/MSCOMCTL.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
MirServer/Mir200/Envir/QuestDiary/16sky.com/牛牛/MSCOMCTL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
推荐服务器租用.htm
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
推荐服务器租用.htm
Resource
win10v2004-20240226-en
General
- Target MirServer/LogServer/LogDataServer.exe
- Size 1002KB
- Sample240305-qt23eagh44
- SHA256 b92ab6838cea8b03b78d11505db50bd233274b08884c9b436f42afbee39fa1cd
- MD5 01d8cfd1c73c1c991a2dfbbb9d871f13
- SHA1 4fde81699d40b761b6d194912d23e0af89d9be5c
- SHA512 999e3d92823a5a76e7143852786fae000d297b0faf32b8b96c61e34eecef5771bf2130e224ca43afb3293dc6ffde2f967efb1c0a899d3fdc6fa631d2b681bdd4
- SSDEEP 24576:NGFDvix3x3XsWiiQ4q78+Q+66qC2Ze3XKGQR1oXv3:NAm3x3XsWi/hIA66qY3XK2v3
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion LogDataServer.exe