Overview
overview
7Static
static
37f38832772...18.exe
windows7-x64
77f38832772...18.exe
windows10-2004-x64
7HFUILib.dll
windows7-x64
3HFUILib.dll
windows10-2004-x64
3HuofengGameWorld.exe
windows7-x64
6HuofengGameWorld.exe
windows10-2004-x64
7IEAux.dll
windows7-x64
1IEAux.dll
windows10-2004-x64
1bin/downlo...Fw.exe
windows7-x64
3bin/downlo...Fw.exe
windows10-2004-x64
7bin/downlo...rm.exe
windows7-x64
6bin/downlo...rm.exe
windows10-2004-x64
6bin/downlo...FW.exe
windows7-x64
1bin/downlo...FW.exe
windows10-2004-x64
1bin/downlo...71.dll
windows7-x64
1bin/downlo...71.dll
windows10-2004-x64
1bin/downlo...id.dll
windows7-x64
1bin/downlo...id.dll
windows10-2004-x64
1bin/downlo...ne.dll
windows7-x64
1bin/downlo...ne.dll
windows10-2004-x64
1bin/downlo...71.dll
windows7-x64
3bin/downlo...71.dll
windows10-2004-x64
3bin/downlo...71.dll
windows7-x64
3bin/downlo...71.dll
windows10-2004-x64
3bin/downlo...b1.dll
windows7-x64
3bin/downlo...b1.dll
windows10-2004-x64
3bin/xldl.dll
windows7-x64
3bin/xldl.dll
windows10-2004-x64
3hfgwupdate.exe
windows7-x64
6hfgwupdate.exe
windows10-2004-x64
6msvcp100.dll
windows7-x64
3msvcp100.dll
windows10-2004-x64
3Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-05-2024 02:30
Static task
static1
Behavioral task
behavioral1
Sample
7f38832772b97aa7cd7c11e130273189_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7f38832772b97aa7cd7c11e130273189_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
HFUILib.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
HFUILib.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
HuofengGameWorld.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
HuofengGameWorld.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
IEAux.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
IEAux.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
bin/download/MiniTPFw.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
bin/download/MiniTPFw.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
bin/download/MiniThunderPlatform.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
bin/download/MiniThunderPlatform.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
bin/download/ThunderFW.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
bin/download/ThunderFW.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
bin/download/atl71.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
bin/download/atl71.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
bin/download/dl_peer_id.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
bin/download/dl_peer_id.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
bin/download/download_engine.dll
Resource
win7-20240419-en
Behavioral task
behavioral20
Sample
bin/download/download_engine.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
bin/download/msvcp71.dll
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
bin/download/msvcp71.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
bin/download/msvcr71.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
bin/download/msvcr71.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
bin/download/zlib1.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
bin/download/zlib1.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
bin/xldl.dll
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
bin/xldl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
hfgwupdate.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
hfgwupdate.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
msvcp100.dll
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
msvcp100.dll
Resource
win10v2004-20240426-en
General
-
Target
bin/download/MiniThunderPlatform.exe
-
Size
262KB
-
MD5
e2e9483568dc53f68be0b80c34fe27fb
-
SHA1
8919397fcc5ce4f91fe0dc4e6f55cea5d39e4bb9
-
SHA256
205c40f2733ba3e30cc538adc6ac6ee46f4c84a245337a36108095b9280abb37
-
SHA512
b6810288e5f9ad49dcbf13bf339eb775c52e1634cfa243535ab46fda97f5a2aac112549d21e2c30a95306a57363819be8ad5efd4525e27b6c446c17c9c587e4e
-
SSDEEP
6144:ePH9aqri3YL1Avg3NloWPxFL8QL2Ma8tvT0ecR:eP4qri3YL1Avg3NloWPTnL2f3x
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 MiniThunderPlatform.exe