Overview

overview

7

Static

static

7

客户端.exe

windows7-x64

3

客户端.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

athd.dll

windows7-x64

1

athd.dll

windows10-2004-x64

3

atwd.dll

windows7-x64

1

atwd.dll

windows10-2004-x64

1

client.exe

windows7-x64

1

client.exe

windows10-2004-x64

1

killproc.dll

windows7-x64

1

killproc.dll

windows10-2004-x64

3

mkh.dll

windows7-x64

1

mkh.dll

windows10-2004-x64

1

sfd.dll

windows7-x64

3

sfd.dll

windows10-2004-x64

3

shutdown.dll

windows7-x64

shutdown.dll

windows10-2004-x64

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

服务端.exe

windows7-x64

3

服务端.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

ATGD.dll

windows7-x64

1

ATGD.dll

windows10-2004-x64

1

ATWD.dll

windows7-x64

1

ATWD.dll

windows10-2004-x64

1

datatools.exe

windows7-x64

1

datatools.exe

windows10-2004-x64

1

server.exe

windows7-x64

1

server.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/03/2024, 15:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    server.exe

  • Size

    1.9MB

  • MD5

    86b2c59bbc43bf94d771bb12408415a7

  • SHA1

    805b26b700c13f5ec8f18a5f5884d8a603f5ae4e

  • SHA256

    b68d8e54c58885c93168bc3f88034bb7ed1c4d1ea6301ed7e254cca144ce3422

  • SHA512

    6194ee6ae0f586e6076d74e0cce51bbecdbd77cb5d890f62baa0faaffb35d853dc8f6c7bdab0b61a08e23bb8d799fe2b15d9d7903e3c23d2e3fbec1a5f3ee05a

  • SSDEEP

    49152:6G9z4Jj3pZG5Cjr31GEc/h+gRR6WgPtxA4YiGABK/BUZtWMhkGsqws:Rz6LpZG5acTR63PnA4pE/2Zys

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\server.exe
    "C:\Users\Admin\AppData\Local\Temp\server.exe"
    1⤵
      PID:2500

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2500-0-0x0000000010000000-0x0000000010010000-memory.dmp

      Filesize

      64KB

      Download