Overview

overview

7

Static

static

3

27afd8876f...18.exe

windows7-x64

3

27afd8876f...18.exe

windows10-2004-x64

3

$PLUGINSDI...if.dll

windows7-x64

3

$PLUGINSDI...if.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ew.dll

windows7-x64

3

$PLUGINSDI...ew.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

360Inst-kuwo.exe

windows7-x64

7

360Inst-kuwo.exe

windows10-2004-x64

7

EncodeBnd.exe

windows7-x64

1

EncodeBnd.exe

windows10-2004-x64

1

Install360AV.exe

windows7-x64

1

Install360AV.exe

windows10-2004-x64

1

bin/CKuwoPlayer.dll

windows7-x64

5

bin/CKuwoPlayer.dll

windows10-2004-x64

5

bin/CWmpPlayer.dll

windows7-x64

1

bin/CWmpPlayer.dll

windows10-2004-x64

1

bin/CoreAVC0.dll

windows7-x64

1

bin/CoreAVC0.dll

windows10-2004-x64

1

bin/DshowPlayer.dll

windows7-x64

5

bin/DshowPlayer.dll

windows10-2004-x64

5

bin/Encode.exe

windows7-x64

1

bin/Encode.exe

windows10-2004-x64

1

bin/KwAni.dll

windows7-x64

1

bin/KwAni.dll

windows10-2004-x64

1

bin/KwCommonUI.dll

windows7-x64

5

bin/KwCommonUI.dll

windows10-2004-x64

5

Analysis

  • max time kernel
    63s
  • max time network
    70s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 07:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    360Inst-kuwo.exe

  • Size

    645KB

  • MD5

    4d8edc50c5bf1dd49b73950b597cc8e8

  • SHA1

    189306c5825e14167f4c1f8e5cb202ed723db597

  • SHA256

    c4785d7e60dced9422f47c7450b836fca7af4de178edd5d1511fed8da077e421

  • SHA512

    17193529f825f497f09ea1a171fe185a8cf0e20524f14badfc76340eaecb44af112613e668da4469f9998ebe2cd90b370d69a1913e35b0edaac3e22013766939

  • SSDEEP

    12288:7et32YRyg++CFiNO5eqgea+/SmOjH3YMInPgssd1lWeIY9JUeOXgjXyXfBgQgR:72Xtfd1D3YMyP41lDImJUeGsXMfBAR

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\360Inst-kuwo.exe
    "C:\Users\Admin\AppData\Local\Temp\360Inst-kuwo.exe"
    1⤵
    • Loads dropped DLL
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\360net_30637.dll
    Filesize

    49KB

    MD5

    f6c560ecd7497fe57d1bd71c37b5b59d

    SHA1

    f87aee6d3163962484b4f95226c83df3e6150c3e

    SHA256

    4343e6d1223f6e50c1e953ecb77753bbc0211a6b2df397435172cfeee29d7e26

    SHA512

    ed61e63f98e88d6ba1285417c425cd7e8a5646cf9d03a5bb7b0171254eefa52409af34d2fbaffa3502b6a234e92ca904dce00ce8067ee37ab55b18aabd22951e

    Download Submit