Overview
overview
7Static
static
3DVR4000qud...un.exe
windows7-x64
1DVR4000qud...un.exe
windows10-2004-x64
1DVR4000qud...up.exe
windows7-x64
7DVR4000qud...up.exe
windows10-2004-x64
7DVR4000qud...nt.chm
windows7-x64
1DVR4000qud...nt.chm
windows10-2004-x64
1DVR4000qud...em.dll
windows7-x64
1DVR4000qud...em.dll
windows10-2004-x64
1DVR4000qud...ll.exe
windows7-x64
1DVR4000qud...ll.exe
windows10-2004-x64
1DVR4000qud...re.sys
windows7-x64
1DVR4000qud...re.sys
windows10-2004-x64
1DVR4000qud...nt.chm
windows7-x64
1DVR4000qud...nt.chm
windows10-2004-x64
1DVR4000qud...nt.doc
windows7-x64
4DVR4000qud...nt.doc
windows10-2004-x64
1DVR4000qud...er.chm
windows7-x64
1DVR4000qud...er.chm
windows10-2004-x64
1DVR4000qud...er.doc
windows7-x64
4DVR4000qud...er.doc
windows10-2004-x64
1DVR4000qud...er.chm
windows7-x64
1DVR4000qud...er.chm
windows10-2004-x64
1DVR4000qud...er.doc
windows7-x64
4DVR4000qud...er.doc
windows10-2004-x64
1DVR4000qud...EB.doc
windows7-x64
4DVR4000qud...EB.doc
windows10-2004-x64
1DVR4000qud...eb.chm
windows7-x64
1DVR4000qud...eb.chm
windows10-2004-x64
1DVR4000qud...up.exe
windows7-x64
7DVR4000qud...up.exe
windows10-2004-x64
7DVR4000qud...ck.dll
windows7-x64
1DVR4000qud...ck.dll
windows10-2004-x64
1Analysis
- max time kernel
92s - max time network
98s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
30/05/2024, 14:19
Static task
static1
Behavioral task
behavioral1
Sample
DVR4000qud/Autorun.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
DVR4000qud/Autorun.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
DVR4000qud/Client/DVR4000-Client-Setup.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
DVR4000qud/Client/DVR4000-Client-Setup.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
DVR4000qud/Client/doc/Simplified/Client.chm
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
DVR4000qud/Client/doc/Simplified/Client.chm
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
DVR4000qud/Client/oem.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
DVR4000qud/Client/oem.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
DVR4000qud/Driver/DrvInstall.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
DVR4000qud/Driver/DrvInstall.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
DVR4000qud/Driver/hvCapture.sys
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
DVR4000qud/Driver/hvCapture.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
DVR4000qud/Help/Simplified/Client.chm
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
DVR4000qud/Help/Simplified/Client.chm
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
DVR4000qud/Help/Simplified/Client.doc
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
DVR4000qud/Help/Simplified/Client.doc
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
DVR4000qud/Help/Simplified/Player.chm
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
DVR4000qud/Help/Simplified/Player.chm
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
DVR4000qud/Help/Simplified/Player.doc
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
DVR4000qud/Help/Simplified/Player.doc
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
DVR4000qud/Help/Simplified/Server.chm
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
DVR4000qud/Help/Simplified/Server.chm
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
DVR4000qud/Help/Simplified/Server.doc
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
DVR4000qud/Help/Simplified/Server.doc
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
DVR4000qud/Help/Simplified/WEB.doc
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
DVR4000qud/Help/Simplified/WEB.doc
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
DVR4000qud/Help/Simplified/Web.chm
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
DVR4000qud/Help/Simplified/Web.chm
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
DVR4000qud/Server/DVR4000-Server-Setup.exe
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
DVR4000qud/Server/DVR4000-Server-Setup.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
DVR4000qud/Server/back.dll
Resource
win7-20240419-en
Behavioral task
behavioral32
Sample
DVR4000qud/Server/back.dll
Resource
win10v2004-20240508-en
General
- Target DVR4000qud/Autorun.exe
- Size 2.1MB
- Sample240530-rnb5gace53
- SHA256 070693526aafc1fd9be1cd60f92a1f9429d0af41c07ed7f19493e2e93d4a9e17
- MD5 e4cc37a313630251e5274eb045b56079
- SHA1 08dcf76ce3bba596d53d5b3b6dad671377c84234
- SHA512 1b8aa9edc020415ed992c100141a94e15ccf3c277162413aca1b6a714fbb99a085580183d07df629a2f78d9ca21271ea741a95eaf9c329ee2849456e6da55e28
- SSDEEP 24576:mLCoB6R0VLnf6nuTdzBvIuvpBPwcLZCJe:HYcIL6uTN+uvpBPwcl
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 892 Autorun.exe 892 Autorun.exe