Overview
overview
7Static
static
7Engines/HF...id.exe
windows7-x64
1Engines/HF...id.exe
windows10-2004-x64
1Engines/HG...en.exe
windows7-x64
1Engines/HG...en.exe
windows10-2004-x64
1Engines/Ti...10.exe
windows7-x64
1Engines/Ti...10.exe
windows10-2004-x64
1Engines/Yi...12.exe
windows7-x64
7Engines/Yi...12.exe
windows10-2004-x64
7Engines/he...12.exe
windows7-x64
1Engines/he...12.exe
windows10-2004-x64
1Engines/lzzjz.exe
windows7-x64
7Engines/lzzjz.exe
windows10-2004-x64
7Engines/pi...la.exe
windows7-x64
7Engines/pi...la.exe
windows10-2004-x64
7Engines/re...er.exe
windows7-x64
7Engines/re...er.exe
windows10-2004-x64
7Engines/yi...3A.exe
windows7-x64
5Engines/yi...3A.exe
windows10-2004-x64
5Engines/yi...3B.exe
windows7-x64
5Engines/yi...3B.exe
windows10-2004-x64
5嘻嘻五�...��.exe
windows7-x64
6嘻嘻五�...��.exe
windows10-2004-x64
5更多软�...��.url
windows7-x64
1更多软�...��.url
windows10-2004-x64
1飘荡软件.url
windows7-x64
1飘荡软件.url
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
11-06-2024 18:31
Behavioral task
behavioral1
Sample
Engines/HForbid/pbrain-HForbid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Engines/HForbid/pbrain-HForbid.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Engines/HGarden/pbrain-HGarden.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Engines/HGarden/pbrain-HGarden.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Engines/Tito2010/pbrain-Tito2010.exe
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
Engines/Tito2010/pbrain-Tito2010.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Engines/Yixin2012/pbrain-Yixin2012.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
Engines/Yixin2012/pbrain-Yixin2012.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Engines/hewer12/pbrain-hewer12.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
Engines/hewer12/pbrain-hewer12.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Engines/lzzjz.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Engines/lzzjz.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
Engines/piskvork/pbrain-pela.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
Engines/piskvork/pbrain-pela.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Engines/renjusolver/pbrain-RenjuSolver.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Engines/renjusolver/pbrain-RenjuSolver.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Engines/yixin2013(A)/pbrain-Yixin13A.exe
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
Engines/yixin2013(A)/pbrain-Yixin13A.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
Engines/yixin2013(B)/pbrain-Yixin13B.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Engines/yixin2013(B)/pbrain-Yixin13B.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
嘻嘻五子棋辅助.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
嘻嘻五子棋辅助.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
更多软件下载.url
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
更多软件下载.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
飘荡软件.url
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
飘荡软件.url
Resource
win10v2004-20240226-en
General
-
Target
Engines/renjusolver/pbrain-RenjuSolver.exe
-
Size
129KB
-
MD5
ac281f90ca456a98e19d1fce3260f3d6
-
SHA1
9ead8e554f87f44c43614f5f8f5677adfdd6e922
-
SHA256
9f063b3712cc55f60d1df83b7e18de80c65dcd3205cb941955a75a88c468a068
-
SHA512
600b989fb9e4164a39e463ff6fb742f5835a03ef37986ebbf3492c711993b7bda114c3e2a79b6f8d258b4413ef4bd6ba406f3fc0feffcb46f0f296143bfccc70
-
SSDEEP
3072:Tf64nMCJhQzsg+MlS3fJteaUZqaz0GV99wHA776q6X0:20MCTTg+ES3fJteaPazVV9+Vq6X0
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral16/memory/4500-0-0x0000000000400000-0x00000000005DC000-memory.dmp upx behavioral16/memory/4500-1-0x0000000000400000-0x00000000005DC000-memory.dmp upx