Overview
overview
5Static
static
35252e00d2d...f9.exe
windows7-x64
35252e00d2d...f9.exe
windows10-2004-x64
3$PLUGINSDIR/LogEx.dll
windows7-x64
3$PLUGINSDIR/LogEx.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...s2.dll
windows7-x64
3$PLUGINSDI...s2.dll
windows10-2004-x64
3$_4_/EntAd...$1.exe
windows7-x64
5$_4_/EntAd...$1.exe
windows10-2004-x64
1$_4_/EntAd...sh.exe
windows7-x64
1$_4_/EntAd...sh.exe
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
26/03/2024, 09:58
Static task
static1
Behavioral task
behavioral1
Sample
5252e00d2dc0fa62fb4a3721826acb9b8c8198f5734003cca85887bfa2ec56f9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5252e00d2dc0fa62fb4a3721826acb9b8c8198f5734003cca85887bfa2ec56f9.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LogEx.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LogEx.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240319-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ipinfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ipinfo.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsProcess2.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsProcess2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$_4_/EntAdmin/publish/$1.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$_4_/EntAdmin/publish/$1.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$_4_/EntAdmin/publish/$_4_/EntAdmin/publish/360EntPublish.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$_4_/EntAdmin/publish/$_4_/EntAdmin/publish/360EntPublish.exe
Resource
win10v2004-20240226-en
General
-
Target
$_4_/EntAdmin/publish/$_4_/EntAdmin/publish/360EntPublish.exe
-
Size
2.0MB
-
MD5
0194749f3c6a0ef6de1ba88bcb5330cc
-
SHA1
1791cac7c60ab35101f0181db1ea42c28dfc27bf
-
SHA256
6b242f7181ad73c6175c1bc35b61a412e546b45aca84927b85ac55c48975987a
-
SHA512
f5a28d242dbac74f9496b98c0afe4e11cdd17c078f148aabf5492172f8afbf72223962e3bf164b02af8226f1c36dcab21f55a16badc8986b98724917464e3137
-
SSDEEP
49152:73wQLKexImrAbjzcw2j/4YMsEYziO1FjULFDXsfNWq3Ut9p/ETP10cViGsXtnT:Ee9iO1FjUlsl1Sbz
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_4_\EntAdmin\publish\$_4_\EntAdmin\publish\360EntPublish.exe"C:\Users\Admin\AppData\Local\Temp\$_4_\EntAdmin\publish\$_4_\EntAdmin\publish\360EntPublish.exe"1⤵PID:1664
-
C:\Users\Admin\AppData\Local\Temp\$_4_\EntAdmin\publish\$_4_\EntAdmin\publish\360EntPublish.exe"C:\Users\Admin\AppData\Local\Temp\$_4_\EntAdmin\publish\$_4_\EntAdmin\publish\360EntPublish.exe" /service1⤵PID:5076