Overview

overview

7

Static

static

3

mpxsglsetup.exe

windows7-x64

7

mpxsglsetup.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

API_COM.dll

windows7-x64

1

API_COM.dll

windows10-2004-x64

1

Mwic_32.dll

windows7-x64

1

Mwic_32.dll

windows10-2004-x64

1

RWic.dll

windows7-x64

1

RWic.dll

windows10-2004-x64

1

SWind.dll

windows7-x64

1

SWind.dll

windows10-2004-x64

1

client/index.html

windows7-x64

1

client/index.html

windows10-2004-x64

1

client/view/list.exe

windows7-x64

1

client/view/list.exe

windows10-2004-x64

1

convert/convert.exe

windows7-x64

1

convert/convert.exe

windows10-2004-x64

1

mpsoftup.exe

windows7-x64

1

mpsoftup.exe

windows10-2004-x64

7

mpweb.exe

windows7-x64

1

mpweb.exe

windows10-2004-x64

1

mpxsgl.exe

windows7-x64

4

mpxsgl.exe

windows10-2004-x64

4

readme.htm

windows7-x64

1

readme.htm

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 11:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    mpweb.exe

  • Size

    51KB

  • MD5

    52cf36bb3ecd73cf875ba195a2242485

  • SHA1

    f3bb787287ca6e94b94c48e3d0397583b9810c77

  • SHA256

    d19ac94c96a260aa5a6eda4726e8dec3f85251128f4d454e0e6f41be4856a3b0

  • SHA512

    882b98a7858917e6a76f97f6a9480002bdb1850048549d1739a804bf543761e8c464e3dc51b565d281c27f8e4934a401e2cad81f28fec8b7774deb6e95ffb23d

  • SSDEEP

    1536:PJeVjQpc8rG7YvssdrH2l8E0v07wDLjRCR:8jUGxsF60yw9C

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\mpweb.exe
    "C:\Users\Admin\AppData\Local\Temp\mpweb.exe"
    1⤵
      PID:1512

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1512-0-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB

      Download