Overview
overview
7Static
static
74399生死...��.exe
windows7-x64
14399生死...��.exe
windows10-2004-x64
14399生死...ir.dll
windows7-x64
14399生死...ir.dll
windows10-2004-x64
14399生死...30.dll
windows7-x64
54399生死...30.dll
windows10-2004-x64
54399生死...jj.exe
windows7-x64
14399生死...jj.exe
windows10-2004-x64
14399生死...nt.dll
windows7-x64
14399生死...nt.dll
windows10-2004-x64
1使用说明.url
windows7-x64
1使用说明.url
windows10-2004-x64
1极速软�...��.url
windows7-x64
1极速软�...��.url
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
16-05-2024 15:15
Behavioral task
behavioral1
Sample
4399生死狙击刷金币修改器/4399生死狙击刷金币修改器.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4399生死狙击刷金币修改器/4399生死狙击刷金币修改器.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
4399生死狙击刷金币修改器/s_ju/asmls/Dir.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
4399生死狙击刷金币修改器/s_ju/asmls/Dir.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
4399生死狙击刷金币修改器/s_ju/asmls/Dnz_30.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
4399生死狙击刷金币修改器/s_ju/asmls/Dnz_30.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
4399生死狙击刷金币修改器/s_ju/asmls/need/ssjj.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
4399生死狙击刷金币修改器/s_ju/asmls/need/ssjj.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
4399生死狙击刷金币修改器/s_ju/down_01/Basement.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
4399生死狙击刷金币修改器/s_ju/down_01/Basement.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
使用说明.url
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
使用说明.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
极速软件下载.url
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
极速软件下载.url
Resource
win10v2004-20240508-en
General
-
Target
4399生死狙击刷金币修改器/4399生死狙击刷金币修改器.exe
-
Size
32KB
-
MD5
2877d78ed4eee70144f622a4d1836a25
-
SHA1
7e7375ab91751c9b48a267893170cf17ed88cd3c
-
SHA256
4a360fa2f89baee05b1f00486f93c09805fd4e10e651e84e6733c3a4c2c7e693
-
SHA512
d051ff7578eaf405f68b983e7dca6bc314a07aca9fee03aa555cd19898c51792746096d22b0f932bd0d8796e7b169702e84af58ab77c23f63bf4eed52db12224
-
SSDEEP
768:rfFlsDVbkpNWKpGKW5fSPWsnTfFlsDVbkpNWKp:rfFl8VbqI0I0WUTfFl8VbqI0
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main 4399生死狙击刷金币修改器.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3048 4399生死狙击刷金币修改器.exe 3048 4399生死狙击刷金币修改器.exe 3048 4399生死狙击刷金币修改器.exe