Overview
overview
6Static
static
3tw6805a驱...ll.exe
windows7-x64
1tw6805a驱...ll.exe
windows10-2004-x64
1tw6805a驱...ci.sys
windows7-x64
1tw6805a驱...ci.sys
windows10-2004-x64
1tw6805a驱...er.exe
windows7-x64
1tw6805a驱...er.exe
windows10-2004-x64
1tw6805a驱...BL.dll
windows7-x64
1tw6805a驱...BL.dll
windows10-2004-x64
1tw6805a驱...er.exe
windows7-x64
6tw6805a驱...er.exe
windows10-2004-x64
6tw6805a驱...M4.dll
windows7-x64
3tw6805a驱...M4.dll
windows10-2004-x64
3tw6805a驱...up.exe
windows7-x64
1tw6805a驱...up.exe
windows10-2004-x64
1tw6805a驱...nt.dll
windows7-x64
1tw6805a驱...nt.dll
windows10-2004-x64
1tw6805a驱...nt.exe
windows7-x64
1tw6805a驱...nt.exe
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
20/05/2024, 13:34
Static task
static1
Behavioral task
behavioral1
Sample
tw6805a驱动/Driver/Driver Install.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
tw6805a驱动/Driver/Driver Install.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
tw6805a驱动/Driver/aaaPci.sys
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
tw6805a驱动/Driver/aaaPci.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
tw6805a驱动/P2PClient/FTPPlayer.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
tw6805a驱动/P2PClient/FTPPlayer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
tw6805a驱动/P2PClient/GBL.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
tw6805a驱动/P2PClient/GBL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
tw6805a驱动/P2PClient/LocalPlayer.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
tw6805a驱动/P2PClient/LocalPlayer.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
tw6805a驱动/P2PClient/SHXPlayM4.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
tw6805a驱动/P2PClient/SHXPlayM4.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
tw6805a驱动/P2PClient/Setup.exe
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
tw6805a驱动/P2PClient/Setup.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
tw6805a驱动/P2PClient/client.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
tw6805a驱动/P2PClient/client.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
tw6805a驱动/P2PClient/dvrclient.exe
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
tw6805a驱动/P2PClient/dvrclient.exe
Resource
win10v2004-20240226-en
General
-
Target
tw6805a驱动/Driver/Driver Install.exe
-
Size
252KB
-
MD5
baf172c5a2901f5f7ea6332e91d7f442
-
SHA1
7bad3dd67629a7f9b86a5dae282d44cba98d7304
-
SHA256
1603e806fc0411a982166402267cc4bc167639e3555eabb35dda146b66007954
-
SHA512
193a997f5a956086aa64d8c10fa0b4334b10ae96baadadee9925977066206aa4872e79771ed025e26919442267d9a3bf55bf448862fe6e87481fb2295955f43b
-
SSDEEP
3072:s4Yd0l7R+XzjhyQfIWVOo6i4QN9eBaZ3wcNaF/paHK9xSg0DkNipSI8mm2pDoNL0:s4Z+/bIWVMwee3whFDqaH
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2996 Driver Install.exe 2996 Driver Install.exe