Overview
overview
3Static
static
3VwMeter/DeLib.dll
windows7-x64
1VwMeter/DeLib.dll
windows10-2004-x64
1VwMeter/De...st.dll
windows7-x64
1VwMeter/De...st.dll
windows10-2004-x64
1VwMeter/VwMeter.exe
windows7-x64
1VwMeter/VwMeter.exe
windows10-2004-x64
1VwMeter/VwUpdate.exe
windows7-x64
1VwMeter/VwUpdate.exe
windows10-2004-x64
1VwMeter/�...��.url
windows7-x64
1VwMeter/�...��.url
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15-03-2024 15:05
Static task
static1
Behavioral task
behavioral1
Sample
VwMeter/DeLib.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
VwMeter/DeLib.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
VwMeter/DeLibSys32test.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
VwMeter/DeLibSys32test.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
VwMeter/VwMeter.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
VwMeter/VwMeter.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
VwMeter/VwUpdate.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
VwMeter/VwUpdate.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
VwMeter/新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
VwMeter/新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
VwMeter/VwMeter.exe
-
Size
294KB
-
MD5
515ea3ec7a961dfdbdf4849d561559f5
-
SHA1
ca256fc0e38446171e5722b276e05a700dbf4a06
-
SHA256
7586a222983bac061034d0612bd744abc851bb95f821d6e73e92ef746976b85b
-
SHA512
00c2ab6e3f6b477561232522daffcb09980d0d9410ab13d4a912ddbededb58bfe47754bd8acb04c0cadaabac8e1e0737eca0bd7cc53290dae34e84d950bae60a
-
SSDEEP
6144:2i4S+cPWaLTCW3e0dZfFgCZTdsmnEla3ex2v3ANBbwuE:k9cuaF1dTdxGmnOauK9J
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe -
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 3000 VwMeter.exe 3000 VwMeter.exe 3000 VwMeter.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3000 VwMeter.exe 3000 VwMeter.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56B
MD5ae04516249bfb2cc854d213fd611f983
SHA1566b4aeb24e15c9076f0beab5624319e6a864503
SHA2568ecb8833ede79dab7a44c42d286e5c6bb30efb91e115d7767b4537c0b5d3035b
SHA51277ffd795c0c9f7742361afc63d878ba43b0fbb0cfe74e9a85ee08d3ed20e724091b505d4af600594036aed6b512c90bba86f425d22c9d54895a01a7c173b3b25