Overview
overview
7Static
static
7Engines/HF...id.exe
windows7-x64
1Engines/HF...id.exe
windows10-2004-x64
1Engines/HG...en.exe
windows7-x64
1Engines/HG...en.exe
windows10-2004-x64
1Engines/Ti...10.exe
windows7-x64
1Engines/Ti...10.exe
windows10-2004-x64
1Engines/Yi...12.exe
windows7-x64
7Engines/Yi...12.exe
windows10-2004-x64
7Engines/he...12.exe
windows7-x64
1Engines/he...12.exe
windows10-2004-x64
1Engines/lzzjz.exe
windows7-x64
7Engines/lzzjz.exe
windows10-2004-x64
7Engines/pi...la.exe
windows7-x64
7Engines/pi...la.exe
windows10-2004-x64
7Engines/re...er.exe
windows7-x64
7Engines/re...er.exe
windows10-2004-x64
7Engines/yi...3A.exe
windows7-x64
5Engines/yi...3A.exe
windows10-2004-x64
5Engines/yi...3B.exe
windows7-x64
5Engines/yi...3B.exe
windows10-2004-x64
5嘻嘻五�...��.exe
windows7-x64
6嘻嘻五�...��.exe
windows10-2004-x64
5更多软�...��.url
windows7-x64
1更多软�...��.url
windows10-2004-x64
1飘荡软件.url
windows7-x64
1飘荡软件.url
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11-06-2024 18:31
Behavioral task
behavioral1
Sample
Engines/HForbid/pbrain-HForbid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Engines/HForbid/pbrain-HForbid.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Engines/HGarden/pbrain-HGarden.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Engines/HGarden/pbrain-HGarden.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Engines/Tito2010/pbrain-Tito2010.exe
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
Engines/Tito2010/pbrain-Tito2010.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Engines/Yixin2012/pbrain-Yixin2012.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
Engines/Yixin2012/pbrain-Yixin2012.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Engines/hewer12/pbrain-hewer12.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
Engines/hewer12/pbrain-hewer12.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Engines/lzzjz.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Engines/lzzjz.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
Engines/piskvork/pbrain-pela.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
Engines/piskvork/pbrain-pela.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Engines/renjusolver/pbrain-RenjuSolver.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Engines/renjusolver/pbrain-RenjuSolver.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Engines/yixin2013(A)/pbrain-Yixin13A.exe
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
Engines/yixin2013(A)/pbrain-Yixin13A.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
Engines/yixin2013(B)/pbrain-Yixin13B.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Engines/yixin2013(B)/pbrain-Yixin13B.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
嘻嘻五子棋辅助.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
嘻嘻五子棋辅助.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
更多软件下载.url
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
更多软件下载.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
飘荡软件.url
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
飘荡软件.url
Resource
win10v2004-20240226-en
General
-
Target
Engines/yixin2013(B)/pbrain-Yixin13B.exe
-
Size
967KB
-
MD5
62b536e5d30582a0ebf3c71818ae1402
-
SHA1
670be14139d8458118b97bcd340fb3b9ffae2a92
-
SHA256
9e4c370339142dfc0111295299258fa3ec51ff83d11f927468b2fedfe4699dc8
-
SHA512
7fb10352560eebfa4637baf6c892c298c0db1adbdcfad4a3e07236b833f03e65eed6a893a07645c5080f455ba56ece3ffddd481a75990f2e9cf9ef70bfed2952
-
SSDEEP
24576:LMqeh6yINYfprER6vp1114vh1MHa2HnJjvCV8xThAFlz5Nsq6:I7SIakvp10v72HnJjvCV8RhAFlz5qq6
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 39 IoCs
Processes:
pbrain-Yixin13B.exepid process 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe 2900 pbrain-Yixin13B.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2900-0-0x0000000000400000-0x0000000001400000-memory.dmpFilesize
16.0MB