Overview

overview

8

Static

static

3

4ae6aa1589...18.exe

windows7-x64

7

4ae6aa1589...18.exe

windows10-2004-x64

7

$PLUGINSDI...gy.exe

windows7-x64

7

$PLUGINSDI...gy.exe

windows10-2004-x64

8

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...86.exe

windows7-x64

7

$PLUGINSDI...86.exe

windows10-2004-x64

7

Icons/proto_AIM.dll

windows7-x64

1

Icons/proto_AIM.dll

windows10-2004-x64

1

Icons/proto_ICQ.dll

windows7-x64

1

Icons/proto_ICQ.dll

windows10-2004-x64

1

Icons/proto_IRC.dll

windows7-x64

1

Icons/proto_IRC.dll

windows10-2004-x64

1

Icons/proto_MSN.dll

windows7-x64

1

Icons/proto_MSN.dll

windows10-2004-x64

1

Icons/proto_YAHOO.dll

windows7-x64

1

Icons/proto_YAHOO.dll

windows10-2004-x64

1

One Instan...er.exe

windows7-x64

1

One Instan...er.exe

windows10-2004-x64

1

dbtool.exe

windows7-x64

1

dbtool.exe

windows10-2004-x64

1

plugins/GG.dll

windows7-x64

3

plugins/GG.dll

windows10-2004-x64

3

plugins/IRC.dll

windows7-x64

3

plugins/IRC.dll

windows10-2004-x64

3

plugins/Yahoo.dll

windows7-x64

3

plugins/Yahoo.dll

windows10-2004-x64

3

plugins/advaimg.dll

windows7-x64

1

plugins/advaimg.dll

windows10-2004-x64

1

plugins/aim.dll

windows7-x64

3

plugins/aim.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    15-07-2024 18:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    One Instant Messenger.exe

  • Size

    652KB

  • MD5

    fefbf897448d2357d87909ae99c73c1f

  • SHA1

    7dadba678993b8f814c82eda3621d1f39b44583f

  • SHA256

    385d6fc86ff71389fef63048033fac7f3a7b5d37283828f901b7ac616c7efc8d

  • SHA512

    ec29ee66ae86bd6ec069816a2760ba757dd2402f513916e644c4c21b1c0d0233e028c9966d9c93af300429a6015bfd65828e4244edde77dada80ebf6a33cde1e

  • SSDEEP

    6144:l7D2nSb7BcWJDE51YpzQXnqsaM+CNfZI3BqD8K6YI7E7qr3o13/vAgcuqM7S7Lv:l7DySvBcWq0aXqsaONfusdMo/3b7SXv

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\One Instant Messenger.exe
    "C:\Users\Admin\AppData\Local\Temp\One Instant Messenger.exe"
    1⤵
      PID:2292

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads