Overview
overview
7Static
static
7Important/...id.dll
windows7-x64
1Important/...id.dll
windows10-2004-x64
1Important/...EL.dll
windows7-x64
7Important/...EL.dll
windows10-2004-x64
7UpDate.exe
windows7-x64
7UpDate.exe
windows10-2004-x64
7WebBrowser.exe
windows7-x64
7WebBrowser.exe
windows10-2004-x64
7精易编�...��.exe
windows7-x64
7精易编�...��.exe
windows10-2004-x64
7Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12-05-2024 18:20
Behavioral task
behavioral1
Sample
Important/DiDaGrid.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Important/DiDaGrid.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Important/SkinH_EL.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Important/SkinH_EL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
UpDate.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
UpDate.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
WebBrowser.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
WebBrowser.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
精易编程助手.exe
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
精易编程助手.exe
Resource
win10v2004-20240426-en
General
-
Target
WebBrowser.exe
-
Size
713KB
-
MD5
29c976b214c7b4841e362d29f782d08f
-
SHA1
dd40193579faf1e774c69a99c652b073d77aada8
-
SHA256
75f8144356539cad365d6f66970637a5928c9ecec6daeefb21b362a9f027d8e6
-
SHA512
c2c2c8b0eca7a65b1205f6db60c4b0781487da1b7536aae967fac8c816414f568c1d1f333ecd189655b96f86ca93d3d5bc79b8d068800348680ff2d9c137dc9c
-
SSDEEP
12288:ZadaSu9Nz7DgcFRWmGt8oz7UBFITXAhWclk19OAJEb5vvBap:Zad29NDgvl8oz7YFlu+7a
Malware Config
Signatures
-
resource yara_rule behavioral7/memory/328-5-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-7-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-8-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-10-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-9-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-21-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-52-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-49-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-47-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-45-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-41-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-39-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-37-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-33-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-31-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-27-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-23-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-19-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral7/memory/328-63-0x0000000010000000-0x000000001003E000-memory.dmp upx -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main WebBrowser.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TypedURLs WebBrowser.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 328 WebBrowser.exe 328 WebBrowser.exe 328 WebBrowser.exe 328 WebBrowser.exe 328 WebBrowser.exe 328 WebBrowser.exe