Overview
overview
5Static
static
3Clanwar1.0...mp.dll
windows7-x64
1Clanwar1.0...mp.dll
windows10-2004-x64
3Clanwar1.0/CWBase.dll
windows7-x64
1Clanwar1.0/CWBase.dll
windows10-2004-x64
1Clanwar1.0...ib.dll
windows7-x64
3Clanwar1.0...ib.dll
windows10-2004-x64
3Clanwar1.0...gr.dll
windows7-x64
1Clanwar1.0...gr.dll
windows10-2004-x64
1Clanwar1.0...le.dll
windows7-x64
1Clanwar1.0...le.dll
windows10-2004-x64
5Clanwar1.0...rt.exe
windows7-x64
1Clanwar1.0...rt.exe
windows10-2004-x64
1Clanwar1.0...le.dll
windows7-x64
5Clanwar1.0...le.dll
windows10-2004-x64
5Clanwar1.0/FNWar3.dll
windows7-x64
1Clanwar1.0/FNWar3.dll
windows10-2004-x64
3Clanwar1.0/GGWAR3.dll
windows7-x64
1Clanwar1.0/GGWAR3.dll
windows10-2004-x64
3Clanwar1.0/GHDx8.dll
windows7-x64
1Clanwar1.0/GHDx8.dll
windows10-2004-x64
3Clanwar1.0...ta.dll
windows7-x64
1Clanwar1.0...ta.dll
windows10-2004-x64
1Clanwar1.0...oc.dll
windows7-x64
1Clanwar1.0...oc.dll
windows10-2004-x64
1Clanwar1.0...ll.dll
windows7-x64
1Clanwar1.0...ll.dll
windows10-2004-x64
1Clanwar1.0...ar.exe
windows7-x64
1Clanwar1.0...ar.exe
windows10-2004-x64
1Clanwar1.0...gr.dll
windows7-x64
1Clanwar1.0...gr.dll
windows10-2004-x64
1Clanwar1.0...pt.dll
windows7-x64
3Clanwar1.0...pt.dll
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
21-07-2024 22:32
Static task
static1
Behavioral task
behavioral1
Sample
Clanwar1.0/AgentBmp.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral2
Sample
Clanwar1.0/AgentBmp.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Clanwar1.0/CWBase.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral4
Sample
Clanwar1.0/CWBase.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Clanwar1.0/ComCtrlLib.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral6
Sample
Clanwar1.0/ComCtrlLib.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Clanwar1.0/ConfigMgr.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral8
Sample
Clanwar1.0/ConfigMgr.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Clanwar1.0/ErrHandle.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral10
Sample
Clanwar1.0/ErrHandle.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Clanwar1.0/ErrorReport.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral12
Sample
Clanwar1.0/ErrorReport.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Clanwar1.0/EzIMClientModule.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral14
Sample
Clanwar1.0/EzIMClientModule.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Clanwar1.0/FNWar3.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral16
Sample
Clanwar1.0/FNWar3.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Clanwar1.0/GGWAR3.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral18
Sample
Clanwar1.0/GGWAR3.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Clanwar1.0/GHDx8.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral20
Sample
Clanwar1.0/GHDx8.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Clanwar1.0/GameStatDota.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral22
Sample
Clanwar1.0/GameStatDota.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Clanwar1.0/GetIPLoc.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral24
Sample
Clanwar1.0/GetIPLoc.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Clanwar1.0/HFAuthShell.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral26
Sample
Clanwar1.0/HFAuthShell.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Clanwar1.0/HFClanWar.exe
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral28
Sample
Clanwar1.0/HFClanWar.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Clanwar1.0/HFDLMgr.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral30
Sample
Clanwar1.0/HFDLMgr.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Clanwar1.0/HFEncrypt.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral32
Sample
Clanwar1.0/HFEncrypt.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
General
-
Target
Clanwar1.0/HFClanWar.exe
-
Size
673KB
-
MD5
8d69cc085812dba14ff0f7772fad45ae
-
SHA1
c97d1dcf4791363e576b52b2a512fd30e403fb4d
-
SHA256
997e2370b31427e7a6ee9af8a6034b504338bc2a00215388c5404a843671375f
-
SHA512
bdb2fca58f00b40ee7dee24215967eebf7d6a5f08aa6d5a410b8dbe094fbca5566120892b06cc29680aa15d98a448ba22e99ab726a6794412b960b40abc2197d
-
SSDEEP
12288:7g4b/gQmWnIzHqIWiv2lUmaurOMk/CdIW8mjF06Xdj:7IQtXICKmaurQW8mjF0OJ
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3016 HFClanWar.exe 3016 HFClanWar.exe 3016 HFClanWar.exe