Overview
overview
3Static
static
1新建文�...p3.exe
windows7-x64
3新建文�...p3.exe
windows10-2004-x64
3新建文�...��.url
windows7-x64
1新建文�...��.url
windows10-2004-x64
1最新版�...��.url
windows7-x64
1最新版�...��.url
windows10-2004-x64
1软件官�...��.url
windows7-x64
1软件官�...��.url
windows10-2004-x64
1闪电下载吧.url
windows7-x64
1闪电下载吧.url
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
30/04/2024, 07:10
Static task
static1
Behavioral task
behavioral1
Sample
新建文件夹/setup3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
新建文件夹/setup3.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
新建文件夹/新云软件.url
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
新建文件夹/新云软件.url
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
最新版免费下载-百度搜【闪电软件园】.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
最新版免费下载-百度搜【闪电软件园】.url
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
软件官网--闪电软件园.url
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
软件官网--闪电软件园.url
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
闪电下载吧.url
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
闪电下载吧.url
Resource
win10v2004-20240419-en
General
-
Target
新建文件夹/setup3.exe
-
Size
3.9MB
-
MD5
ab582ff6a74e9f976111ce730d640ad5
-
SHA1
be287e5018ded2f913e9c9060a18eefe0fa200d1
-
SHA256
8cbd16eb6ad744f0463991aff04bbbb8ce7e51635dd68025788e9e63ca79d62b
-
SHA512
6e0dfdbbcd86fc591f8a84d52f393b4a0e54d11893487b4564a586e0a824666e823ad43efe35d80d287904e9493bd8c0c058aaaca60fb670339bb0780db7245a
-
SSDEEP
98304:yUoSKgN0kcE5pK8jf6IVLBKSIZSXh99YeT:yTAN0Oz7SHZWT
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2432 setup3.exe 2432 setup3.exe