Overview
overview
9Static
static
9Haozhuodao...ta.exe
windows7-x64
7Haozhuodao...ta.exe
windows10-2004-x64
7$APPDATA/H...at.exe
windows7-x64
1$APPDATA/H...at.exe
windows10-2004-x64
1$APPDATA/H...nf.exe
windows7-x64
1$APPDATA/H...nf.exe
windows10-2004-x64
1$APPDATA/H...e3.dll
windows7-x64
3$APPDATA/H...e3.dll
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...rk.dll
windows7-x64
1$PLUGINSDI...rk.dll
windows10-2004-x64
1$TEMP/QQPh...28.exe
windows7-x64
1$TEMP/QQPh...28.exe
windows10-2004-x64
1$TEMP/SU_l...97.exe
windows7-x64
7$TEMP/SU_l...97.exe
windows10-2004-x64
7$TEMP/setup_3126.exe
windows7-x64
1$TEMP/setup_3126.exe
windows10-2004-x64
1ContextBG.dll
windows7-x64
1ContextBG.dll
windows10-2004-x64
1HZDApp.exe
windows7-x64
1HZDApp.exe
windows10-2004-x64
1HZDHelper.exe
windows7-x64
1HZDHelper.exe
windows10-2004-x64
1Analysis
-
max time kernel
93s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
08-05-2024 20:08
Behavioral task
behavioral1
Sample
Haozhuodao_V3.4.17.417_Beta.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Haozhuodao_V3.4.17.417_Beta.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$APPDATA/HZDP/HZDStat.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$APPDATA/HZDP/HZDStat.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$APPDATA/HZDP/HZDunf.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$APPDATA/HZDP/HZDunf.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$APPDATA/HZDP/sqlite3.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$APPDATA/HZDP/sqlite3.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/md5dll.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/md5dll.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/processwork.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/processwork.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
$TEMP/QQPhoneManagerWeb_710061.1028.exe
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
$TEMP/QQPhoneManagerWeb_710061.1028.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
$TEMP/SU_lk78_setup_lg0597.exe
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
$TEMP/SU_lk78_setup_lg0597.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
$TEMP/setup_3126.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
$TEMP/setup_3126.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
ContextBG.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
ContextBG.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
HZDApp.exe
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
HZDApp.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
HZDHelper.exe
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
HZDHelper.exe
Resource
win10v2004-20240426-en
General
-
Target
$APPDATA/HZDP/HZDunf.exe
-
Size
742KB
-
MD5
e2600b9c9732966b53137ae329ba49c3
-
SHA1
a04129490705077cde1d0ca12d542392251edda3
-
SHA256
8f670f94f53e2f62e4bb55d3abb09e2f616eb09311dc4bd7d5617f09e814a4f1
-
SHA512
a3ef95c0e262a7f27e80a5b824eaeaec01d226375aab193bade490170b5c7e042976e74d85386de3b4c058506731ae2deba19bd4ecb77653a69d1ff6c4fa8711
-
SSDEEP
12288:5OAKLcyUYonmmpDDoeBnD1N+n0t8i5QEg/LtmwPViz0M0sTYQ56+2rNEvE28QorV:5GffmJoUn8L0giISTYQE+2+vP8f4E
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
HZDunf.exepid process 536 HZDunf.exe