Overview
overview
3Static
static
32006921111...nt.vbs
windows7-x64
12006921111...nt.vbs
windows10-2004-x64
12006921111...ta.exe
windows7-x64
12006921111...ta.exe
windows10-2004-x64
12006921111...��.url
windows7-x64
12006921111...��.url
windows10-2004-x64
12006921111...��.url
windows7-x64
12006921111...��.url
windows10-2004-x64
12006921111...��.url
windows7-x64
12006921111...��.url
windows10-2004-x64
1Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 04:34
Static task
static1
Behavioral task
behavioral1
Sample
200692111116907/VistaForm/mPoint.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
200692111116907/VistaForm/mPoint.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
200692111116907/VistaForm/vista.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
200692111116907/VistaForm/vista.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
200692111116907/VistaForm/免费『商业源码』.url
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
200692111116907/VistaForm/免费『商业源码』.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
200692111116907/免费『商业源码』.url
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
200692111116907/免费『商业源码』.url
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
200692111116907/新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
200692111116907/新云软件.url
Resource
win10v2004-20240226-en
General
-
Target
200692111116907/VistaForm/vista.exe
-
Size
712KB
-
MD5
41c0296d6675e80a1601b73e36b70e93
-
SHA1
3471326583ea7766af4de13df86437736e73e4a7
-
SHA256
4c75fd179e82788af8f51f7fbf23f507cd7752d5fbf2d0a47172bd6c9796264d
-
SHA512
4b651d8fbccd47a2185e1b181bc29fbde2fc77552b95e8df36d3e75203b91704343b0332e4319be36f433849699beb684927ec1dc2e95ee5a07dd3f97d166bb4
-
SSDEEP
3072:ufb+b5TbbKvPIZ6B55W3iT2bWdrJS8xcH:mb+b5TbbKvPIZ6B5YiHVS
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2028 vista.exe