Overview
overview
9Static
static
93vjiaTool.exe
windows7-x64
13vjiaTool.exe
windows10-2004-x64
3Aliyun.OSS.dll
windows7-x64
1Aliyun.OSS.dll
windows10-2004-x64
1AxInterop....ts.dll
windows7-x64
1AxInterop....ts.dll
windows10-2004-x64
1DevExpress....2.dll
windows7-x64
1DevExpress....2.dll
windows10-2004-x64
1DevExpress....2.dll
windows7-x64
1DevExpress....2.dll
windows10-2004-x64
1DevExpress...re.dll
windows7-x64
1DevExpress...re.dll
windows10-2004-x64
1DevExpress....2.dll
windows7-x64
1DevExpress....2.dll
windows10-2004-x64
1DevExpress...re.dll
windows7-x64
1DevExpress...re.dll
windows10-2004-x64
1DevExpress...re.dll
windows7-x64
1DevExpress...re.dll
windows10-2004-x64
1DevExpress...re.dll
windows7-x64
1DevExpress...re.dll
windows10-2004-x64
1DevExpress...re.dll
windows7-x64
1DevExpress...re.dll
windows10-2004-x64
1DevExpress...re.dll
windows7-x64
1DevExpress...re.dll
windows10-2004-x64
1DevExpress...re.dll
windows7-x64
1DevExpress...re.dll
windows10-2004-x64
1DevExpress....2.dll
windows7-x64
1DevExpress....2.dll
windows10-2004-x64
1DevExpress....2.dll
windows7-x64
1DevExpress....2.dll
windows10-2004-x64
1DevExpress....2.dll
windows7-x64
1DevExpress....2.dll
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18-05-2024 14:34
Behavioral task
behavioral1
Sample
3vjiaTool.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3vjiaTool.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Aliyun.OSS.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Aliyun.OSS.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
AxInterop.ShockwaveFlashObjects.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
AxInterop.ShockwaveFlashObjects.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
DevExpress.BonusSkins.v17.2.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
DevExpress.BonusSkins.v17.2.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
DevExpress.Data.v17.2.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
DevExpress.Data.v17.2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
DevExpress.Dialogs.v17.2.Core.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
DevExpress.Dialogs.v17.2.Core.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
DevExpress.Images.v17.2.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
DevExpress.Images.v17.2.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
DevExpress.Office.v17.2.Core.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
DevExpress.Office.v17.2.Core.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
DevExpress.Pdf.v17.2.Core.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
DevExpress.Pdf.v17.2.Core.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
DevExpress.PivotGrid.v17.2.Core.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
DevExpress.PivotGrid.v17.2.Core.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
DevExpress.Printing.v17.2.Core.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
DevExpress.Printing.v17.2.Core.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
DevExpress.RichEdit.v17.2.Core.dll
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
DevExpress.RichEdit.v17.2.Core.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
DevExpress.Sparkline.v17.2.Core.dll
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
DevExpress.Sparkline.v17.2.Core.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
DevExpress.Utils.v17.2.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
DevExpress.Utils.v17.2.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
DevExpress.XtraBars.v17.2.dll
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
DevExpress.XtraBars.v17.2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
DevExpress.XtraDialogs.v17.2.dll
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
DevExpress.XtraDialogs.v17.2.dll
Resource
win10v2004-20240508-en
General
-
Target
3vjiaTool.exe
-
Size
211KB
-
MD5
40e04e4b1cd08c8c800cdd6881644441
-
SHA1
1d79ebb6b8c9683fea8f63c714f938c22a7d9b0b
-
SHA256
f5674320e3a07d5f8da1efeb6b9d175aaf9cd1acb9ca08f6d953f367dcb3bc9a
-
SHA512
b29aea2b6cf9110f8e092ed356e9a0fcbe97de6c461c115be3899edc734f445989a93d1a3cbbed50cefc06933385da2e872d7582f36afdcaa59a45fe13d4b7c1
-
SSDEEP
6144:4mxQQXfpbaAh4kmr8uqjNPP+XZPSjdsJ8v:4qQQvdaAh4kmr0SPiO8v
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
3vjiaTool.exepid process 640 3vjiaTool.exe 640 3vjiaTool.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/640-0-0x000007FEF5313000-0x000007FEF5314000-memory.dmpFilesize
4KB
-
memory/640-1-0x0000000000AD0000-0x0000000000B0A000-memory.dmpFilesize
232KB
-
memory/640-2-0x0000000000250000-0x000000000027C000-memory.dmpFilesize
176KB
-
memory/640-3-0x000000001B390000-0x000000001BE1C000-memory.dmpFilesize
10.5MB
-
memory/640-4-0x0000000000280000-0x00000000002AA000-memory.dmpFilesize
168KB
-
memory/640-5-0x0000000000430000-0x000000000047A000-memory.dmpFilesize
296KB
-
memory/640-6-0x000007FEF5310000-0x000007FEF5CFC000-memory.dmpFilesize
9.9MB
-
memory/640-7-0x000000001C100000-0x000000001C6CA000-memory.dmpFilesize
5.8MB
-
memory/640-8-0x000000001C8D0000-0x000000001CEF4000-memory.dmpFilesize
6.1MB
-
memory/640-9-0x0000000000A00000-0x0000000000A18000-memory.dmpFilesize
96KB
-
memory/640-10-0x000007FEF5310000-0x000007FEF5CFC000-memory.dmpFilesize
9.9MB
-
memory/640-11-0x000000001D610000-0x000000001DC02000-memory.dmpFilesize
5.9MB
-
memory/640-12-0x0000000000A60000-0x0000000000A6C000-memory.dmpFilesize
48KB
-
memory/640-13-0x0000000000A60000-0x0000000000A6C000-memory.dmpFilesize
48KB
-
memory/640-17-0x0000000002270000-0x0000000002280000-memory.dmpFilesize
64KB
-
memory/640-18-0x000007FEF5310000-0x000007FEF5CFC000-memory.dmpFilesize
9.9MB
-
memory/640-16-0x0000000002270000-0x0000000002280000-memory.dmpFilesize
64KB
-
memory/640-15-0x0000000000AC0000-0x0000000000ACC000-memory.dmpFilesize
48KB
-
memory/640-14-0x0000000000AC0000-0x0000000000ACC000-memory.dmpFilesize
48KB
-
memory/640-19-0x000007FEF5313000-0x000007FEF5314000-memory.dmpFilesize
4KB
-
memory/640-20-0x000007FEF5310000-0x000007FEF5CFC000-memory.dmpFilesize
9.9MB
-
memory/640-21-0x000007FEF5310000-0x000007FEF5CFC000-memory.dmpFilesize
9.9MB
-
memory/640-22-0x000007FEF5310000-0x000007FEF5CFC000-memory.dmpFilesize
9.9MB