General

  • Target

    hxapp.exe

  • Size

    21.2MB

  • MD5

    b7730200a78c6971268c379382c5640f

  • SHA1

    9b67e094d43e070f5c1ce8c5263861923694234b

  • SHA256

    296871be3c4b885e1e76e8b9e6ed101b32781a768d8b66c62eb1e06d58fe0870

  • SHA512

    bf95ee38be08d5d0ea7351665d22104ed90e34dcf5c27734f7622c5edc594144a39db2cffb14df77a2026e8f22c949548453ff1afb4f469d903444b886e7ae1d

  • SSDEEP

    393216:Xjh/Y8upelHOMgp0orI/tbfO8/5SRD1sMNUQ6reJ/QooszVa/o+u9pJG8oy:X1Y8vOdppKhfNQ1jKA/3oca/zu9bGq

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • hxapp.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • data/app.so
    .elf linux x64
  • data/flutter_assets/AssetManifest.bin
  • data/flutter_assets/AssetManifest.json
  • data/flutter_assets/FontManifest.json
  • data/flutter_assets/NOTICES.Z
    .gz
  • NOTICES.Z
  • data/flutter_assets/assets/Country.mmdb
  • data/flutter_assets/assets/au.jpg
    .jpg
  • data/flutter_assets/assets/background.png
    .png
  • data/flutter_assets/assets/ca.jpg
    .jpg
  • data/flutter_assets/assets/cn.jpg
    .jpg
  • data/flutter_assets/assets/config.dat
  • data/flutter_assets/assets/de.jpg
    .jpg
  • data/flutter_assets/assets/fr.jpg
    .jpg
  • data/flutter_assets/assets/global.dat
  • data/flutter_assets/assets/hk.jpg
    .jpg
  • data/flutter_assets/assets/iconfont/toly_icon.ttf
  • data/flutter_assets/assets/in.jpg
    .jpg
  • data/flutter_assets/assets/jp.jpg
    .jpg
  • data/flutter_assets/assets/kr.jpg
    .jpg
  • data/flutter_assets/assets/location.png
    .png
  • data/flutter_assets/assets/logo.ico
  • data/flutter_assets/assets/logo.png
    .png
  • data/flutter_assets/assets/my.jpg
    .jpg
  • data/flutter_assets/assets/ph.jpg
    .jpg
  • data/flutter_assets/assets/remember.jpg
    .jpg
    • https://github.com/Hongxinvpn/Hongxinvpn/blob/main/README.md

  • data/flutter_assets/assets/ru.jpg
    .jpg
  • data/flutter_assets/assets/rule.dat
  • data/flutter_assets/assets/sg.jpg
    .jpg
  • data/flutter_assets/assets/th.jpg
    .jpg
  • data/flutter_assets/assets/tw.jpg
    .jpg
  • data/flutter_assets/assets/uk.jpg
    .jpg
  • data/flutter_assets/assets/us.jpg
    .jpg
  • data/flutter_assets/assets/vn.jpg
    .jpg
  • data/flutter_assets/fonts/MaterialIcons-Regular.otf
  • data/flutter_assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf
  • data/flutter_assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf
  • data/flutter_assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf
  • data/flutter_assets/packages/window_manager/images/ic_chrome_close.png
    .png
  • data/flutter_assets/packages/window_manager/images/ic_chrome_maximize.png
    .png
  • data/flutter_assets/packages/window_manager/images/ic_chrome_minimize.png
    .png
  • data/flutter_assets/packages/window_manager/images/ic_chrome_unmaximize.png
    .png
  • data/flutter_assets/shaders/ink_sparkle.frag
  • data/icudtl.dat
  • flutter_windows.dll
    .dll windows:5 windows x64 arch:x64

    bb2dcca7fc72028a48c5540107f3e1ab


    Headers

    Imports

    Exports

    Sections

  • hxapp.exe
    .exe windows:6 windows x64 arch:x64

    c3dc22f3ac789a99d29a6fa2fdec82d2


    Headers

    Imports

    Sections

  • libclash.dll
    .dll windows:6 windows x64 arch:x64

    de83a517fe73c429d914c0c8e88037af


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2d14223d6f13e6499c10a49c1d5a1075


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    29c9442431af224cc987829ab842aa86


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platform_device_id_windows_plugin.dll
    .dll windows:6 windows x64 arch:x64

    02ad3c0aed9a8ae5dbe804eb93d28c8b


    Headers

    Imports

    Exports

    Sections

  • proxy_manager_plugin.dll
    .dll windows:6 windows x64 arch:x64

    7d5b9005d161c188ab0ee32e06c2d690


    Headers

    Imports

    Exports

    Sections

  • screen_retriever_plugin.dll
    .dll windows:6 windows x64 arch:x64

    b8aa651c3353c3919aeafb24a6483257


    Headers

    Imports

    Exports

    Sections

  • system_tray_plugin.dll
    .dll windows:6 windows x64 arch:x64

    7a6aa452cc12938f56e28ae0bf5f1670


    Headers

    Imports

    Exports

    Sections

  • url_launcher_windows_plugin.dll
    .dll windows:6 windows x64 arch:x64

    aab303bd66e37f6f761020d4ae9a0a30


    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • window_manager_plugin.dll
    .dll windows:6 windows x64 arch:x64

    3a513897bd893f918ddca2bcfe2c026b


    Headers

    Imports

    Exports

    Sections

  • windows_single_instance_plugin.dll
    .dll windows:6 windows x64 arch:x64

    0f47cf1ebc623723287895f2ac57c71c


    Headers

    Imports

    Exports

    Sections

  • wintun.dll
    .dll windows:6 windows x64 arch:x64

    01ce5951b7d0dcca222159a28511a055


    Code Sign

    Headers

    Imports

    Exports

    Sections