Overview
overview
9Static
static
9Haozhuodao...ta.exe
windows7-x64
7Haozhuodao...ta.exe
windows10-2004-x64
7$APPDATA/H...at.exe
windows7-x64
1$APPDATA/H...at.exe
windows10-2004-x64
1$APPDATA/H...nf.exe
windows7-x64
1$APPDATA/H...nf.exe
windows10-2004-x64
1$APPDATA/H...e3.dll
windows7-x64
3$APPDATA/H...e3.dll
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...rk.dll
windows7-x64
1$PLUGINSDI...rk.dll
windows10-2004-x64
1$TEMP/QQPh...28.exe
windows7-x64
1$TEMP/QQPh...28.exe
windows10-2004-x64
1$TEMP/SU_l...97.exe
windows7-x64
7$TEMP/SU_l...97.exe
windows10-2004-x64
7$TEMP/setup_3126.exe
windows7-x64
1$TEMP/setup_3126.exe
windows10-2004-x64
1ContextBG.dll
windows7-x64
1ContextBG.dll
windows10-2004-x64
1HZDApp.exe
windows7-x64
1HZDApp.exe
windows10-2004-x64
1HZDHelper.exe
windows7-x64
1HZDHelper.exe
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
08-05-2024 20:08
Behavioral task
behavioral1
Sample
Haozhuodao_V3.4.17.417_Beta.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Haozhuodao_V3.4.17.417_Beta.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$APPDATA/HZDP/HZDStat.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$APPDATA/HZDP/HZDStat.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$APPDATA/HZDP/HZDunf.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$APPDATA/HZDP/HZDunf.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$APPDATA/HZDP/sqlite3.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$APPDATA/HZDP/sqlite3.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/md5dll.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/md5dll.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/processwork.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/processwork.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
$TEMP/QQPhoneManagerWeb_710061.1028.exe
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
$TEMP/QQPhoneManagerWeb_710061.1028.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
$TEMP/SU_lk78_setup_lg0597.exe
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
$TEMP/SU_lk78_setup_lg0597.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
$TEMP/setup_3126.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
$TEMP/setup_3126.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
ContextBG.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
ContextBG.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
HZDApp.exe
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
HZDApp.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
HZDHelper.exe
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
HZDHelper.exe
Resource
win10v2004-20240426-en
General
-
Target
$TEMP/QQPhoneManagerWeb_710061.1028.exe
-
Size
185KB
-
MD5
dc031c68643c1f779840ac7305efc551
-
SHA1
c8fa96e544e096fb899c73429753ef8871588f93
-
SHA256
71b4f41a39d7f2ea3dd30a08c810a9c4d3a6d0c2914a7de3c093aecf914d8304
-
SHA512
3e3e1c7abb37bd49718a89619fc373a5704b93e6cec7c6b5b956c135d0fe678b20bed2ba3d93d088ebad3997f666d478eb7983c4218bac90e795eb6477a4731c
-
SSDEEP
3072:G9UgGOvSzDxz0UG5vcD1Afbgy0d8P7Ph+2up48e/KWzLDH:GkOvSzlzbG5EDygQD8iPDH
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2436-0-0x00000000000F0000-0x00000000000F1000-memory.dmpFilesize
4KB