Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 11:22
Behavioral task
behavioral1
Sample
ZOL壁纸-提供高清桌面壁纸下载,美女、动漫、非主流、小清新、爱情、风景.url
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ZOL壁纸-提供高清桌面壁纸下载,美女、动漫、非主流、小清新、爱情、风景.url
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
破解补丁.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
破解补丁.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
绿叶奇迹小辅助VIP版.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
绿叶奇迹小辅助VIP版.exe
Resource
win10v2004-20240426-en
General
-
Target
绿叶奇迹小辅助VIP版.exe
-
Size
1.6MB
-
MD5
1a9d94a42fc5869b88f5367ff7611116
-
SHA1
49cfbed79defd955c754188f4272e0231863e28d
-
SHA256
ab89309e6d49ee12a215491e8c2da85fda4259bf4f82595385238dbf1888f858
-
SHA512
3845c18b9cd45a95d537b48c212d69b8335cb9722455b82dc774b81e1be42aa7eea8e72e8a775672a51b3d0edeb24ff2fc60d6c28d4218c0b77e53f59ce17b62
-
SSDEEP
24576:raCIqEqNNjr1n5Oz4n45woH2ZONw72IxX3OiizHxb54v82oJCGXaSHoMBGo3/rU1:O2tn5j45qA67jCHpW8rEeIMjdjCL
Malware Config
Signatures
-
resource yara_rule behavioral5/memory/2860-1-0x0000000000400000-0x0000000000638000-memory.dmp vmprotect behavioral5/memory/2860-0-0x0000000000400000-0x0000000000638000-memory.dmp vmprotect behavioral5/memory/2860-3-0x0000000000400000-0x0000000000638000-memory.dmp vmprotect