Analysis
- max time kernel
93s - max time network
104s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
08/06/2024, 14:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
frpc.exe
Resource
win7-20240220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
frpc.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
点此使用【启动命令】启动.bat
Resource
win7-20240215-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
点此使用【启动命令】启动.bat
Resource
win10v2004-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
点此使用【配置文件】启动.bat
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
点此使用【配置文件】启动.bat
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target frpc.exe
- Size 10.0MB
- Sample240608-rt43facd9t
- SHA256 fbd1d9cb7b2bd921604fffce3d3f8ecc6d593582189b6a776d08a0b22228796c
- MD5 54a375130b161e5aa0297b0f90f4b7c1
- SHA1 96c1bde044509ceeef03966b064543a57bfb6d9d
- SHA512 27767a212f5599ed31aac92cf5c9724aab30ae9de54cc8451cf2f55d9233396fb9c85b79c7160d6248004ea061dda1658848ef29323f73261aec9ee8c0777aab
- SSDEEP 98304:8Dr3WCDV/CoKBgdzJQRF4TTsuegZRTk6ZFfIgSyM4FxX+Dfy6jjNopJs:8D75V/RU4ZRTfFfrS6L+OJ
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4576 frpc.exe 4576 frpc.exe 4576 frpc.exe 4576 frpc.exe