Overview
overview
7Static
static
7Engines/HF...id.exe
windows7-x64
1Engines/HF...id.exe
windows10-2004-x64
1Engines/HG...en.exe
windows7-x64
1Engines/HG...en.exe
windows10-2004-x64
1Engines/Ti...10.exe
windows7-x64
1Engines/Ti...10.exe
windows10-2004-x64
1Engines/Yi...12.exe
windows7-x64
7Engines/Yi...12.exe
windows10-2004-x64
7Engines/he...12.exe
windows7-x64
1Engines/he...12.exe
windows10-2004-x64
1Engines/lzzjz.exe
windows7-x64
7Engines/lzzjz.exe
windows10-2004-x64
7Engines/pi...la.exe
windows7-x64
7Engines/pi...la.exe
windows10-2004-x64
7Engines/re...er.exe
windows7-x64
7Engines/re...er.exe
windows10-2004-x64
7Engines/yi...3A.exe
windows7-x64
5Engines/yi...3A.exe
windows10-2004-x64
5Engines/yi...3B.exe
windows7-x64
5Engines/yi...3B.exe
windows10-2004-x64
5嘻嘻五�...��.exe
windows7-x64
6嘻嘻五�...��.exe
windows10-2004-x64
5更多软�...��.url
windows7-x64
1更多软�...��.url
windows10-2004-x64
1飘荡软件.url
windows7-x64
1飘荡软件.url
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 18:31
Behavioral task
behavioral1
Sample
Engines/HForbid/pbrain-HForbid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Engines/HForbid/pbrain-HForbid.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Engines/HGarden/pbrain-HGarden.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Engines/HGarden/pbrain-HGarden.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Engines/Tito2010/pbrain-Tito2010.exe
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
Engines/Tito2010/pbrain-Tito2010.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Engines/Yixin2012/pbrain-Yixin2012.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
Engines/Yixin2012/pbrain-Yixin2012.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Engines/hewer12/pbrain-hewer12.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
Engines/hewer12/pbrain-hewer12.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Engines/lzzjz.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Engines/lzzjz.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
Engines/piskvork/pbrain-pela.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
Engines/piskvork/pbrain-pela.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Engines/renjusolver/pbrain-RenjuSolver.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Engines/renjusolver/pbrain-RenjuSolver.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Engines/yixin2013(A)/pbrain-Yixin13A.exe
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
Engines/yixin2013(A)/pbrain-Yixin13A.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
Engines/yixin2013(B)/pbrain-Yixin13B.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Engines/yixin2013(B)/pbrain-Yixin13B.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
嘻嘻五子棋辅助.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
嘻嘻五子棋辅助.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
更多软件下载.url
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
更多软件下载.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
飘荡软件.url
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
飘荡软件.url
Resource
win10v2004-20240226-en
General
-
Target
Engines/piskvork/pbrain-pela.exe
-
Size
10KB
-
MD5
adb5ab2912418541ce02f6755f0f62c9
-
SHA1
79ef8f0407b39ea4b0b096214f457bf0ab5d614e
-
SHA256
42f1d9ba97c65d6d1ef2161de6f1b87865fa73247105f3f63e2f3b1f08edcdc8
-
SHA512
8a46cfe54433c3dfc4aec59cb79c3cfcbb32da1db7b2e643aa0098547c53c65a20b1a65b339f6618acc23b14b3a25918ec5453ca37f58f9c54af6a48e155ca1d
-
SSDEEP
192:6o8IAzztbnhn/QOjvtk6wB62tyiMxz6wpuK4ltb/DTrFxvv44o4KAyL:LYzzBnhnYOe6Jlx2wpvQNTn4Vn
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral13/memory/2012-0-0x0000000000400000-0x000000000050D000-memory.dmp upx behavioral13/memory/2012-1-0x0000000000400000-0x000000000050D000-memory.dmp upx