Overview
overview
7Static
static
3PowerISO6/...64.exe
windows7-x64
7PowerISO6/...64.exe
windows10-2004-x64
7$PLUGINSDI...lp.dll
windows7-x64
3$PLUGINSDI...lp.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3piso.exe
windows7-x64
1piso.exe
windows10-2004-x64
1setup64.exe
windows7-x64
1setup64.exe
windows10-2004-x64
1PowerISO6/...O6.exe
windows7-x64
7PowerISO6/...O6.exe
windows10-2004-x64
7$PLUGINSDI...lp.dll
windows7-x64
1$PLUGINSDI...lp.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$SYSDIR/Dr...mu.sys
windows7-x64
1$SYSDIR/Dr...mu.sys
windows10-2004-x64
1piso.exe
windows7-x64
1piso.exe
windows10-2004-x64
1setup64.exe
windows7-x64
1setup64.exe
windows10-2004-x64
1unicows.dll
windows7-x64
1unicows.dll
windows10-2004-x64
1单机游�...��.url
windows7-x64
1单机游�...��.url
windows10-2004-x64
1安卓游�...��.url
windows7-x64
1安卓游�...��.url
windows10-2004-x64
1General
-
Target
805b5677ba3369e5798ae607b1c9f715_JaffaCakes118
-
Size
5.5MB
-
Sample
240529-l38jbsah6v
-
MD5
805b5677ba3369e5798ae607b1c9f715
-
SHA1
8c4032d0ce8907215efec24f076be2d45046e15b
-
SHA256
7194b09576abe8bb59df17c744ab41066ecf7e5bffe268f97c1fae7ba7b88e2d
-
SHA512
0e16cba7774b7fd38075e58ca8b09f7da084e8fedf588af9f4fc37655e23c8dc53f52a5d36f6169c8a41bbde86f6da352e3d57665f0c465c4ba0e1f75614bda3
-
SSDEEP
98304:T7el4EFHE9FVwi5MsK79zMQi206HzaDvVRHSquDPeTR2hr3gYoTuv6SDd6keP:Tql4h97VK7BdObLlV8rQHTQvB6ZP
Static task
static1
Behavioral task
behavioral1
Sample
PowerISO6/PowerISO6-x64.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
PowerISO6/PowerISO6-x64.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
piso.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
piso.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
setup64.exe
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
setup64.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
PowerISO6/PowerISO6.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
PowerISO6/PowerISO6.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
$SYSDIR/Drivers/scdemu.sys
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
$SYSDIR/Drivers/scdemu.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
piso.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
piso.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
setup64.exe
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
setup64.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
unicows.dll
Resource
win7-20240419-en
Behavioral task
behavioral28
Sample
unicows.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
单机游戏下载.url
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
单机游戏下载.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
安卓游戏下载.url
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
安卓游戏下载.url
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
PowerISO6/PowerISO6-x64.exe
-
Size
2.7MB
-
MD5
68b5224d4d6bf67aaada398b8483a08f
-
SHA1
c73c725407e0924f285abeef981c52c422b0c7c7
-
SHA256
03f6e4a9856270b82784b932ec3fc0dfc6be79471c65ca4b41790955619df000
-
SHA512
0343d3e04f93ab9de899cf2690085346976adfc1506d0a2001948d46d5696153f4d4c0450638665097967d2cdb4b6f2f20afbb1a83a842331a9ce2e592478e96
-
SSDEEP
49152:s/xZYlGD4g8xCEYTJFaR6HN2ozwjCHCIpgRtpESoDzzvMmp:AxZCGD4ZxZYTb3NeC1mRnEfzvM8
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/OCSetupHlp.dll
-
Size
825KB
-
MD5
5374470da6c3d20044b56a945197dc03
-
SHA1
95fbfc5d99ee2b410ec9a2c88494ee3cae99dec1
-
SHA256
c8cdbe6b8699eb1540666b07bc88abcc4e2d4e54a9f7d37b36b259412e7575cd
-
SHA512
9989e9bfd6583fb28e3231fc18b9d7ec1dd802d561ddae0c994f8e6fe343fc49d90864238e0f209c585bc86adfb0f8ec61f9cab617f19c59bd02cf9af7158b51
-
SSDEEP
12288:2JmXkW/rIYAMUlUzY5Iw/SjtScTBMtKs69iv6tN:YNW/Kewqjt/TBSK/iv6tN
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
piso.exe
-
Size
11KB
-
MD5
1ed95bfcbbd891ac169f9b70d8c3a515
-
SHA1
26b6ecbe1ab3e2ed1d8a71632f396a79455a2391
-
SHA256
3925602fe6c3920a67e19fd45196f1eed2089434c5e85b268a56ca000cdecbb4
-
SHA512
96b662d4f995334ec355e04207e5ec8cdfdf0a7bdd6f39ecce5544d17d37b2d5d373ac911d6cbac5bcb0a73e85782277170eb10b869c4974a061822ce8306999
-
SSDEEP
192:J+r/5KEPEvXcq6gP4oynCUzCnYe+PjPXrhA+vlO/h1r9ZCspE+TMQraq3X:J+r/Q3vXcDW4HCnYPLtE/hIeM23X
Score1/10 -
-
-
Target
setup64.exe
-
Size
11KB
-
MD5
1e2f3f4b7feced437ca06446a671fa37
-
SHA1
3efe7c5f91476c004a8272506df4fb8e19a83f11
-
SHA256
12af6a4a38b426139d33d03b9b3f3d6242f1d63863757ab1d667a9a74ddb65e5
-
SHA512
572eb91220e6ebace03a171750df37756a8f57545495644fd037eebd59bb2f5fc9a801c1629a76ecf4185ad4e5f1e85c496df0c62782b1f661d2d167c2ab6e76
-
SSDEEP
192:LMsZ9dD7lpi7YneBkyrnYe+PjPXrhA+vlO/h1r9ZCspE+TMQr9VvMRroY:osZ9dHi0neBTnYPLtE/hIeMEVvMVoY
Score1/10 -
-
-
Target
PowerISO6/PowerISO6.exe
-
Size
2.8MB
-
MD5
3d7db7b063dd3cece6343b498aa35338
-
SHA1
4435f1588709304e84ef182fd74d22407c458449
-
SHA256
824d833b4ee89a0fc95ea20b2677ed56ee53f271710dbdc4424b2aa9831ba9a0
-
SHA512
a76342a3c230e6c9a4fbb6f0bc4fed6005f7bf64d8c165e4ee0a10a8bf59d91fc6502bc4991062b52ba1bc8ec07f8b7eb1da8d1ee5ca3d1f0277c0e15f62f3c8
-
SSDEEP
49152:5B1DURFJibdw5kBGt504BbcWd9dsFME6G++KsVrxtURcGIbKnwPNBnE:5B5URFJiJwKBA55OWDdsKtGdjVrwRWCN
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/OCSetupHlp.dll
-
Size
825KB
-
MD5
5374470da6c3d20044b56a945197dc03
-
SHA1
95fbfc5d99ee2b410ec9a2c88494ee3cae99dec1
-
SHA256
c8cdbe6b8699eb1540666b07bc88abcc4e2d4e54a9f7d37b36b259412e7575cd
-
SHA512
9989e9bfd6583fb28e3231fc18b9d7ec1dd802d561ddae0c994f8e6fe343fc49d90864238e0f209c585bc86adfb0f8ec61f9cab617f19c59bd02cf9af7158b51
-
SSDEEP
12288:2JmXkW/rIYAMUlUzY5Iw/SjtScTBMtKs69iv6tN:YNW/Kewqjt/TBSK/iv6tN
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$SYSDIR/Drivers/scdemu.sys
-
Size
111KB
-
MD5
e7b6afec80242b3283b24eaa1f528365
-
SHA1
1e89896ed5ad2fe06501649c2b324635670592d4
-
SHA256
a2372aea67aa5f6c513730e5f8b652bb1a8f2e12d6d0d9f331c15ab80ec1c967
-
SHA512
c9303dcc07fed08e2a98682c094c1746c30f8bb307afe757224c03587715f40e46cc516486a52486f76deb13727c4af6c361b45d3fc6a8117a06d6ed7e4dff5a
-
SSDEEP
1536:dLhfll0IJ5HgokQiBM7eo/6i7ltJyRhqapqc8i2FYq8SCV6pA6:/h5Hgok5BMioi8cqeqI2uSCg
Score1/10 -
-
-
Target
piso.exe
-
Size
11KB
-
MD5
1ed95bfcbbd891ac169f9b70d8c3a515
-
SHA1
26b6ecbe1ab3e2ed1d8a71632f396a79455a2391
-
SHA256
3925602fe6c3920a67e19fd45196f1eed2089434c5e85b268a56ca000cdecbb4
-
SHA512
96b662d4f995334ec355e04207e5ec8cdfdf0a7bdd6f39ecce5544d17d37b2d5d373ac911d6cbac5bcb0a73e85782277170eb10b869c4974a061822ce8306999
-
SSDEEP
192:J+r/5KEPEvXcq6gP4oynCUzCnYe+PjPXrhA+vlO/h1r9ZCspE+TMQraq3X:J+r/Q3vXcDW4HCnYPLtE/hIeM23X
Score1/10 -
-
-
Target
setup64.exe
-
Size
11KB
-
MD5
1e2f3f4b7feced437ca06446a671fa37
-
SHA1
3efe7c5f91476c004a8272506df4fb8e19a83f11
-
SHA256
12af6a4a38b426139d33d03b9b3f3d6242f1d63863757ab1d667a9a74ddb65e5
-
SHA512
572eb91220e6ebace03a171750df37756a8f57545495644fd037eebd59bb2f5fc9a801c1629a76ecf4185ad4e5f1e85c496df0c62782b1f661d2d167c2ab6e76
-
SSDEEP
192:LMsZ9dD7lpi7YneBkyrnYe+PjPXrhA+vlO/h1r9ZCspE+TMQr9VvMRroY:osZ9dHi0neBTnYPLtE/hIeMEVvMVoY
Score1/10 -
-
-
Target
unicows.dll
-
Size
252KB
-
MD5
f8d176db5b14aed7c9b25e0640226bd1
-
SHA1
a31c1c641639f5b50e79e0330cfc91e6613bf7f9
-
SHA256
f06f36fa03a5db4980c9d1120ada1d9e558515be73eff5b7cd34c48c0d9afd35
-
SHA512
ceb50c3de105cb8a9541161c2bc9d65cc86c9b2bf5e6e40dcb8c8227ba38e0713d30aa84d8479c78e03ee63ef2f75debe7a5bc6a86cc6dcbcee106d93b9597bf
-
SSDEEP
6144:Y4OkcR5cbvIFc8vuB4ShpH4BemwbVkEZ77:YFkedmBPjHv777
Score1/10 -
-
-
Target
单机游戏下载.url
-
Size
224B
-
MD5
ff1fa0b06d05b692d8351127181c865b
-
SHA1
3a746adbee67fb7e4261e257dc40492b76f2f17e
-
SHA256
da168910bbb70dee659e5ff8084f1c1a04441e015810c7d11ad2141f736226a6
-
SHA512
a2f2ac176a04e22016ee4bad78ca2266aa392e52ba51f00d3c31eac05c6602b88b4fc2075cf65ed05e0d4538f1ef48eb43c44ffd9d04e47953ca1a985f2d3660
Score1/10 -
-
-
Target
安卓游戏下载.url
-
Size
228B
-
MD5
e95c87f2bdf77e6e3299bbcc71ae8c4d
-
SHA1
e269e293151c08553ffe618cde2bf3b5954e6c2f
-
SHA256
dfb9c9412d72cf819b051061732c355713d0c283f51ccaf165488c77fe081bb9
-
SHA512
698d871af5aab804274dbcc6e2d952618449b047d39fd1418a03c25be6b8510c28e684416ac0b2ff23e4e73b9b69ccaf1a941e13a29c06e9cf2742fcd7860fcf
Score1/10 -