Overview
overview
7Static
static
7155绿色�...��.url
windows7-x64
1155绿色�...��.url
windows10-2004-x64
1Eric's Tel...ta.dll
windows7-x64
1Eric's Tel...ta.dll
windows10-2004-x64
1Eric's Tel...up.exe
windows7-x64
1Eric's Tel...up.exe
windows10-2004-x64
1Eric's Tel...ta.dll
windows7-x64
7Eric's Tel...ta.dll
windows10-2004-x64
7Eric's Tel...up.exe
windows7-x64
7Eric's Tel...up.exe
windows10-2004-x64
7Analysis
-
max time kernel
141s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/06/2024, 22:28
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Eric's TelNet98 v14.0-SSH (x64)/Data.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Eric's TelNet98 v14.0-SSH (x64)/Data.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Eric's TelNet98 v14.0-SSH (x64)/Setup.exe
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
Eric's TelNet98 v14.0-SSH (x64)/Setup.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Eric's TelNet98 v14.0-SSH/Data.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
Eric's TelNet98 v14.0-SSH/Data.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
Eric's TelNet98 v14.0-SSH/Setup.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
Eric's TelNet98 v14.0-SSH/Setup.exe
Resource
win10v2004-20240508-en
General
-
Target
Eric's TelNet98 v14.0-SSH/Setup.exe
-
Size
91KB
-
MD5
bb4728d42a8564cd745ce2af4547ef81
-
SHA1
fa9617155499c0b3812eeec694119c20f5936a50
-
SHA256
cc3b606894bbf96a0b0a191b94e0cc2e2510f957756aafb2bae2eba87c7ef619
-
SHA512
d8117748fb19e5f7997780a9d11f5c8fa2c4e7e53f7ffcdfa7dbbda8dbbec8e35e34262cc3a7aa8fd46be1c8d180b862bdd8d967174883f865afd2d28a8b3815
-
SSDEEP
1536:TI97q+mGvTLBu7S9LD0CJaWuGGGGGGGGGGGGGGGGGGGGGGkaTH/JwxdCwML0/rs6:TIJq+m8l/zCGGGGGGGGGGGGGGGGGGGGG
Malware Config
Signatures
-
resource yara_rule behavioral10/memory/1860-1-0x00000000027C0000-0x0000000002CDD000-memory.dmp upx behavioral10/memory/1860-2-0x00000000027C0000-0x0000000002CDD000-memory.dmp upx behavioral10/memory/1860-3-0x00000000027C0000-0x0000000002CDD000-memory.dmp upx behavioral10/memory/1860-4-0x00000000027C0000-0x0000000002CDD000-memory.dmp upx behavioral10/memory/1860-6-0x00000000027C0000-0x0000000002CDD000-memory.dmp upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\Eric's TelNet98 v14.0-SSH\Setup.exe"C:\Users\Admin\AppData\Local\Temp\Eric's TelNet98 v14.0-SSH\Setup.exe"1⤵PID:1860
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4168,i,1697479186275492802,18058102846092193784,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:81⤵PID:4600