Overview

overview

3

Static

static

1

7z.dll

windows7-x64

1

7z.dll

windows10-2004-x64

3

Cab.dll

windows7-x64

3

Cab.dll

windows10-2004-x64

3

Data/新云软件.url

windows7-x64

1

Data/新云软件.url

windows10-2004-x64

1

Drivers/Xi...ta.sys

windows7-x64

1

Drivers/Xi...ta.sys

windows10-2004-x64

1

Drivers/Xi...Xp.sys

windows7-x64

1

Drivers/Xi...Xp.sys

windows10-2004-x64

1

Drivers/Xi...gR.sys

windows7-x64

1

Drivers/Xi...gR.sys

windows10-2004-x64

1

DrvMgr.dll

windows7-x64

3

DrvMgr.dll

windows10-2004-x64

3

Recorder.exe

windows7-x64

1

Recorder.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 11:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Drivers/XiaobaiFsRForVista.sys

  • Size

    54KB

  • MD5

    7ef440faf38e79eaab86d5876260f283

  • SHA1

    fb256c62cbb29ac3cdf33f7fb2ea675e46c66c4f

  • SHA256

    752839664419f41f26d995c02b1210482e301266b02d996aa70a10ad72c85615

  • SHA512

    fbe80d148dcc00828a80d1a5a6647018d6bd40ffc2544bbab2f64a90fc860a516a2b1d84636695a79ca48f31955f6fa8b9ab3e5584b119e8e4c4eeada7566dfa

  • SSDEEP

    768:8dvG682oQCybPm1gYqaOgc5Nu3JSXhBVcZr6X86G5HL2NBax2YK+OC7n4LG:avG6doQtTYqnXuZSNE6Gu+TAIn4q

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Drivers\XiaobaiFsRForVista.sys
    1⤵
      PID:1868
      • C:\Users\Admin\AppData\Local\Temp\Drivers\XiaobaiFsRForVista.sys
        C:\Users\Admin\AppData\Local\Temp\Drivers\XiaobaiFsRForVista.sys
        2⤵
          PID:2160

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2160-0-0x0000000000010000-0x0000000000020000-memory.dmp

        Filesize

        64KB

        Download