Overview
overview
7Static
static
7MirServer/...er.exe
windows7-x64
1MirServer/...er.exe
windows10-2004-x64
1MirServer/...te.exe
windows7-x64
1MirServer/...te.exe
windows10-2004-x64
1MirServer/...te.exe
windows7-x64
1MirServer/...te.exe
windows10-2004-x64
1MirServer/...30.exe
windows7-x64
1MirServer/...30.exe
windows10-2004-x64
1MirServer/...er.exe
windows7-x64
1MirServer/...er.exe
windows10-2004-x64
1MirServer/...ir.exe
windows7-x64
1MirServer/...ir.exe
windows10-2004-x64
1MirServer/...er.exe
windows7-x64
1MirServer/...er.exe
windows10-2004-x64
1MirServer/...rv.exe
windows7-x64
1MirServer/...rv.exe
windows10-2004-x64
1MirServer/...��.url
windows7-x64
1MirServer/...��.url
windows10-2004-x64
1MirServer/...��.exe
windows7-x64
1MirServer/...��.exe
windows10-2004-x64
1MirServer/...��.exe
windows7-x64
1MirServer/...��.exe
windows10-2004-x64
1MirServer/...�.html
windows7-x64
1MirServer/...�.html
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
16-05-2024 00:06
Behavioral task
behavioral1
Sample
MirServer/GameLog/LogDataSrv/LogDataServer.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
MirServer/GameLog/LogDataSrv/LogDataServer.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
MirServer/Gate_Server/LoginGate/LoginGate.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
MirServer/Gate_Server/LoginGate/LoginGate.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
MirServer/Gate_Server/RunGate/RunGate.exe
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
MirServer/Gate_Server/RunGate/RunGate.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
MirServer/Gate_Server/SelChrGate/Gate30.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
MirServer/Gate_Server/SelChrGate/Gate30.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
MirServer/Mir200/M2Server.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
MirServer/Mir200/M2Server.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
MirServer/Mir200/Mir.exe
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
MirServer/Mir200/Mir.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
MirServer/Mud2/DBSrv200/DBServer.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
MirServer/Mud2/DBSrv200/DBServer.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
MirServer/Mud2/LogSrv/LoginSrv.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
MirServer/Mud2/LogSrv/LoginSrv.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
MirServer/上万免费版本下载基地.url
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
MirServer/上万免费版本下载基地.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
MirServer/我本沉默传奇启动程序.exe
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
MirServer/我本沉默传奇启动程序.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
MirServer/我本沉默配套登陆器/我本沉默.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
MirServer/我本沉默配套登陆器/我本沉默.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
MirServer/说明文件/版本历史.html
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
MirServer/说明文件/版本历史.html
Resource
win10v2004-20240508-en
General
-
Target
MirServer/我本沉默传奇启动程序.exe
-
Size
634KB
-
MD5
773a0808b3d9d0361b6d94a38b9eb166
-
SHA1
1e268d128571e7de7d54f3d380d34e8cc5d21338
-
SHA256
3a2f3ca265cf6f5249029905b89c3f9445e2a33da9f06a93f76036850884923f
-
SHA512
e2f6cf283e9c809769e72caaa9b85085c5d489a3b722a76d16cee630f8966f2caa472b69fa2bb27329cf46ec1877b398bf1cd115498c4ed87657875629bb5f50
-
SSDEEP
12288:QwFBKfio1oR16s1jkgwE+skG5eCCVUf8RqvB3Yp0WzERwF58mmylsY6LigcAlF:QwFBKxo+s1jkg7MZI5FWgRa5MyOJigc
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\MirServer\我本沉默传奇启动程序.exe"C:\Users\Admin\AppData\Local\Temp\MirServer\我本沉默传奇启动程序.exe"1⤵PID:5096
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4436,i,7012731823941922179,12386606396608877869,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:81⤵PID:4852