Overview

overview

3

Static

static

1

2345Pinyin...nt.exe

windows7-x64

3

2345Pinyin...nt.exe

windows10-2004-x64

3

2345Pinyin...ge.exe

windows7-x64

3

2345Pinyin...ge.exe

windows10-2004-x64

3

Helper_2345Pinyin.exe

windows7-x64

3

Helper_2345Pinyin.exe

windows10-2004-x64

3

Pinyin_2345Svc.dll

windows7-x64

1

Pinyin_2345Svc.dll

windows10-2004-x64

3

coral_extract.dll

windows7-x64

1

coral_extract.dll

windows10-2004-x64

3

courgette_dll.dll

windows7-x64

1

courgette_dll.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 01:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Helper_2345Pinyin.exe

  • Size

    1.1MB

  • MD5

    fc82099da92a59d9bdfe819f09ca43d0

  • SHA1

    0566f15a259927d5ccdcc2eb8430ff1bc5f15636

  • SHA256

    9c1f8408f511976662a6f5298eba39f61bdc122f5da3c7c3d120f035ae9abe5e

  • SHA512

    1146e005b9e8bdcc3098b0693c971cf1faeae2cab48a5db5b31db7b475266568db8893a44bb39a946020f4729b972f4fdc37cf4ea39e338e6f2ae1a5d09b8167

  • SSDEEP

    24576:HII2mRVMuLi/mDnICLJ4gxqBe57/ATDNoo3cK0Ef2gsOu9:KmRV247qBe57/ATDNo2+Ef2gsOa

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Helper_2345Pinyin.exe
    "C:\Users\Admin\AppData\Local\Temp\Helper_2345Pinyin.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3264
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4168,i,13640054265074968359,8146127767143474550,262144 --variations-seed-version --mojo-platform-channel-handle=3896 /prefetch:8
    1⤵
      PID:1232

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Roaming\Helper_2345\temp\download\0\Helper_2345.NewVersion.data
      Filesize

      29B

      MD5

      99fb8e84b8aa92889349054a60e1f359

      SHA1

      1b3dd1afb4fe4533ca16db4dd3e7845c13b0e1c5

      SHA256

      5313e624a817ebcb34675027d12b87465de4fc4fdddfdd74d244490c4911b8e4

      SHA512

      2a99095109445c3ca1b9fad5c87fdfed331641401ca8d19d3ab4d109e18b9dc5feb739485f14f390bd3bcfa3a4325e3b1278fe1bb8690dd8df16edb9af52faac

      Download Submit