Overview
overview
6Static
static
3xlbbqmrj/C...ar.dll
windows7-x64
1xlbbqmrj/C...ar.dll
windows10-2004-x64
1xlbbqmrj/RCX12A.exe
windows7-x64
6xlbbqmrj/RCX12A.exe
windows10-2004-x64
1xlbbqmrj/cncnv.dll
windows7-x64
1xlbbqmrj/cncnv.dll
windows10-2004-x64
1xlbbqmrj/dp1.dll
windows7-x64
1xlbbqmrj/dp1.dll
windows10-2004-x64
3xlbbqmrj/eAPI.dll
windows7-x64
1xlbbqmrj/eAPI.dll
windows10-2004-x64
1xlbbqmrj/iext.dll
windows7-x64
1xlbbqmrj/iext.dll
windows10-2004-x64
1xlbbqmrj/iext2.dll
windows7-x64
1xlbbqmrj/iext2.dll
windows10-2004-x64
1xlbbqmrj/internet.dll
windows7-x64
1xlbbqmrj/internet.dll
windows10-2004-x64
1xlbbqmrj/kernel32.dll
windows7-x64
1xlbbqmrj/kernel32.dll
windows10-2004-x64
1xlbbqmrj/krnln.dll
windows7-x64
1xlbbqmrj/krnln.dll
windows10-2004-x64
1xlbbqmrj/shell.dll
windows7-x64
1xlbbqmrj/shell.dll
windows10-2004-x64
1xlbbqmrj/spec.dll
windows7-x64
1xlbbqmrj/spec.dll
windows10-2004-x64
1xlbbqmrj/wininet.dll
windows7-x64
1xlbbqmrj/wininet.dll
windows10-2004-x64
1xlbbqmrj/�...��.exe
windows7-x64
6xlbbqmrj/�...��.exe
windows10-2004-x64
5xlbbqmrj/�...��.doc
windows7-x64
4xlbbqmrj/�...��.doc
windows10-2004-x64
1xlbbqmrj/�...zp.exe
windows7-x64
1xlbbqmrj/�...zp.exe
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25-05-2024 10:47
Static task
static1
Behavioral task
behavioral1
Sample
xlbbqmrj/CnCalendar.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
xlbbqmrj/CnCalendar.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
xlbbqmrj/RCX12A.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
xlbbqmrj/RCX12A.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
xlbbqmrj/cncnv.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
xlbbqmrj/cncnv.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
xlbbqmrj/dp1.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
xlbbqmrj/dp1.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
xlbbqmrj/eAPI.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
xlbbqmrj/eAPI.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
xlbbqmrj/iext.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
xlbbqmrj/iext.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
xlbbqmrj/iext2.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
xlbbqmrj/iext2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
xlbbqmrj/internet.dll
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
xlbbqmrj/internet.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
xlbbqmrj/kernel32.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
xlbbqmrj/kernel32.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
xlbbqmrj/krnln.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
xlbbqmrj/krnln.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
xlbbqmrj/shell.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
xlbbqmrj/shell.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
xlbbqmrj/spec.dll
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
xlbbqmrj/spec.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
xlbbqmrj/wininet.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
xlbbqmrj/wininet.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
xlbbqmrj/响亮取名软件18.03版本.exe
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
xlbbqmrj/响亮取名软件18.03版本.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
xlbbqmrj/响亮取名软件使用前必读.doc
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
xlbbqmrj/响亮取名软件使用前必读.doc
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
xlbbqmrj/响亮宝宝取名软件.zp.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
xlbbqmrj/响亮宝宝取名软件.zp.exe
Resource
win10v2004-20240508-en
General
-
Target
xlbbqmrj/RCX12A.exe
-
Size
432KB
-
MD5
0f675c9987b960b4506c9427cbd33a14
-
SHA1
7431596ecf2fdde02334c9d203023e21b6d07699
-
SHA256
56d35016d0b60b899973e8ef685890b55315ec0be0172905bd4d51550ddd40a8
-
SHA512
1bc8ef66e2c584793acc47fab429fc54e10bfac27ccb35f893c62e713d38f031cd8a485f88b8d9befa3c4e55f4dddaabdd79b99b387bbb7af1e98ba4bc506d8b
-
SSDEEP
12288:gNsriw+RaqO+2t1AVfxDEYFjx3vv+G/DXyCUzU:Jpq/2uflEYFjx3vvHj4U
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 64 IoCs
Processes:
RCX12A.exepid process 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe 3668 RCX12A.exe