Overview
overview
6Static
static
3tw6805a驱...ll.exe
windows7-x64
1tw6805a驱...ll.exe
windows10-2004-x64
1tw6805a驱...ci.sys
windows7-x64
1tw6805a驱...ci.sys
windows10-2004-x64
1tw6805a驱...er.exe
windows7-x64
1tw6805a驱...er.exe
windows10-2004-x64
1tw6805a驱...BL.dll
windows7-x64
1tw6805a驱...BL.dll
windows10-2004-x64
1tw6805a驱...er.exe
windows7-x64
6tw6805a驱...er.exe
windows10-2004-x64
6tw6805a驱...M4.dll
windows7-x64
3tw6805a驱...M4.dll
windows10-2004-x64
3tw6805a驱...up.exe
windows7-x64
1tw6805a驱...up.exe
windows10-2004-x64
1tw6805a驱...nt.dll
windows7-x64
1tw6805a驱...nt.dll
windows10-2004-x64
1tw6805a驱...nt.exe
windows7-x64
1tw6805a驱...nt.exe
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
20/05/2024, 13:34
Static task
static1
Behavioral task
behavioral1
Sample
tw6805a驱动/Driver/Driver Install.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
tw6805a驱动/Driver/Driver Install.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
tw6805a驱动/Driver/aaaPci.sys
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
tw6805a驱动/Driver/aaaPci.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
tw6805a驱动/P2PClient/FTPPlayer.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
tw6805a驱动/P2PClient/FTPPlayer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
tw6805a驱动/P2PClient/GBL.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
tw6805a驱动/P2PClient/GBL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
tw6805a驱动/P2PClient/LocalPlayer.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
tw6805a驱动/P2PClient/LocalPlayer.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
tw6805a驱动/P2PClient/SHXPlayM4.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
tw6805a驱动/P2PClient/SHXPlayM4.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
tw6805a驱动/P2PClient/Setup.exe
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
tw6805a驱动/P2PClient/Setup.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
tw6805a驱动/P2PClient/client.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
tw6805a驱动/P2PClient/client.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
tw6805a驱动/P2PClient/dvrclient.exe
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
tw6805a驱动/P2PClient/dvrclient.exe
Resource
win10v2004-20240226-en
General
-
Target
tw6805a驱动/P2PClient/dvrclient.exe
-
Size
1.3MB
-
MD5
e4ff46e12031c7d96ea9f0b768f4c372
-
SHA1
9bc65774673ad6baf93ba98183bd90cdcc2ca0dc
-
SHA256
c7cc523d8f397ceba953772fff4d6af39e7aad5d883b0ce425b40d9ea24dc04d
-
SHA512
3e60ede5531fef54ec04020771b4c59555943b36921ae30a220fa3e4c0e6c06606959af1ef055e0c596228cd3e805f6525b2897fda43aea6e0a774318997a379
-
SSDEEP
24576:zjtRQc5sF0EyuJTEXMeImmz83zXtzjnzVwjl0Q7fTuela:FR5s55mN3hbiOQDTue
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2244 dvrclient.exe