Overview
overview
7Static
static
3GoKuaiSetu...38.exe
windows7-x64
7GoKuaiSetu...38.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3GoKuai.exe
windows7-x64
6GoKuai.exe
windows10-2004-x64
6GoKuaiUpdate.exe
windows7-x64
3GoKuaiUpdate.exe
windows10-2004-x64
3Repair.exe
windows7-x64
6Repair.exe
windows10-2004-x64
7RunLaunch.exe
windows7-x64
1RunLaunch.exe
windows10-2004-x64
1bugreport.exe
windows7-x64
1bugreport.exe
windows10-2004-x64
1mfc100.dll
windows7-x64
1mfc100.dll
windows10-2004-x64
1msvcp100.dll
windows7-x64
3msvcp100.dll
windows10-2004-x64
3msvcr100.dll
windows7-x64
3msvcr100.dll
windows10-2004-x64
3msvcr71.dll
windows7-x64
3msvcr71.dll
windows10-2004-x64
3新云软件.url
windows7-x64
1新云软件.url
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
04-07-2024 23:23
Static task
static1
Behavioral task
behavioral1
Sample
GoKuaiSetup_5.1.0.38.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
GoKuaiSetup_5.1.0.38.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
GoKuai.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
GoKuai.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
GoKuaiUpdate.exe
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
GoKuaiUpdate.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
Repair.exe
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Repair.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
RunLaunch.exe
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
RunLaunch.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
bugreport.exe
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
bugreport.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
mfc100.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
mfc100.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
msvcp100.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
msvcp100.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
msvcr100.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
msvcr100.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
msvcr71.dll
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
msvcr71.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
新云软件.url
Resource
win10v2004-20240704-en
General
-
Target
RunLaunch.exe
-
Size
47KB
-
MD5
dfe1b3c6b0a7feb2de881377d297ba1d
-
SHA1
0786d3c66fcfb3e1369ed66a985c0994dd9b264d
-
SHA256
861bb49fe669ae2c27352f7f755b942e03e9d7524d828638d35c1320a738a2f5
-
SHA512
b5654f70b8d8b6f4cb66b16243b1c2bfcc4004c216ff4a4a310e9597bffc70180b364b1b6949b3ca0436b93d5d87c8b48c5c2af1c1058e97b183bc4a64ac8fdf
-
SSDEEP
384:Qxskd/8wjRzXkF4hYHSOKljPV7obiv1xq3UZU9BpwVnYJLlFEMeMk6:Qx5F5XkyYyO8jdWijZU9BpVLl86
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
RunLaunch.exepid Process 2216 RunLaunch.exe 2216 RunLaunch.exe