Overview
overview
3Static
static
3PYF/EGCal.exe
windows7-x64
1PYF/EGCal.exe
windows10-2004-x64
1PYF/GdiPlus.dll
windows7-x64
3PYF/GdiPlus.dll
windows10-2004-x64
3PYF/机械....1.exe
windows7-x64
1PYF/机械....1.exe
windows10-2004-x64
1[机械设...en.exe
windows7-x64
1[机械设...en.exe
windows10-2004-x64
1使用说明.htm
windows7-x64
1使用说明.htm
windows10-2004-x64
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
17-05-2024 04:21
Static task
static1
Behavioral task
behavioral1
Sample
PYF/EGCal.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
PYF/EGCal.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
PYF/GdiPlus.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
PYF/GdiPlus.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
PYF/机械设计系统3.1.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
PYF/机械设计系统3.1.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
[机械设计系统3.1]keygen.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
[机械设计系统3.1]keygen.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
使用说明.htm
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
使用说明.htm
Resource
win10v2004-20240508-en
General
-
Target
PYF/EGCal.exe
-
Size
125KB
-
MD5
f54fe2e982d5b65e51ea3b0c4f4ef461
-
SHA1
8fdc97a7ae6415acd85cb6047a467951641ce6ba
-
SHA256
d3a72f0266fb20180cde23d0bc43e51aee70a4b75f1cdcc351f20c154f74cb1e
-
SHA512
97c28736652a96eac067233c9da9205f7aefc0c6f2327e67bbf11a24a71761d74bd18c463dbeabb2cbe4e318c25e21c0a6650bccd0ef46b4d4092ae63976c4b1
-
SSDEEP
3072:3XG66sIXMFa6T39YX3G1dsNCzSN21NJhVAJxxOm:m66shFa6TCceMWN83hVyxJ
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2060 EGCal.exe