Overview
overview
5Static
static
3Clanwar1.0...mp.dll
windows7-x64
1Clanwar1.0...mp.dll
windows10-2004-x64
3Clanwar1.0/CWBase.dll
windows7-x64
1Clanwar1.0/CWBase.dll
windows10-2004-x64
1Clanwar1.0...ib.dll
windows7-x64
3Clanwar1.0...ib.dll
windows10-2004-x64
3Clanwar1.0...gr.dll
windows7-x64
1Clanwar1.0...gr.dll
windows10-2004-x64
1Clanwar1.0...le.dll
windows7-x64
1Clanwar1.0...le.dll
windows10-2004-x64
5Clanwar1.0...rt.exe
windows7-x64
1Clanwar1.0...rt.exe
windows10-2004-x64
1Clanwar1.0...le.dll
windows7-x64
5Clanwar1.0...le.dll
windows10-2004-x64
5Clanwar1.0/FNWar3.dll
windows7-x64
1Clanwar1.0/FNWar3.dll
windows10-2004-x64
3Clanwar1.0/GGWAR3.dll
windows7-x64
1Clanwar1.0/GGWAR3.dll
windows10-2004-x64
3Clanwar1.0/GHDx8.dll
windows7-x64
1Clanwar1.0/GHDx8.dll
windows10-2004-x64
3Clanwar1.0...ta.dll
windows7-x64
1Clanwar1.0...ta.dll
windows10-2004-x64
1Clanwar1.0...oc.dll
windows7-x64
1Clanwar1.0...oc.dll
windows10-2004-x64
1Clanwar1.0...ll.dll
windows7-x64
1Clanwar1.0...ll.dll
windows10-2004-x64
1Clanwar1.0...ar.exe
windows7-x64
1Clanwar1.0...ar.exe
windows10-2004-x64
1Clanwar1.0...gr.dll
windows7-x64
1Clanwar1.0...gr.dll
windows10-2004-x64
1Clanwar1.0...pt.dll
windows7-x64
3Clanwar1.0...pt.dll
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
21/07/2024, 22:32
Static task
static1
Behavioral task
behavioral1
Sample
Clanwar1.0/AgentBmp.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral2
Sample
Clanwar1.0/AgentBmp.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Clanwar1.0/CWBase.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral4
Sample
Clanwar1.0/CWBase.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Clanwar1.0/ComCtrlLib.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral6
Sample
Clanwar1.0/ComCtrlLib.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Clanwar1.0/ConfigMgr.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral8
Sample
Clanwar1.0/ConfigMgr.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Clanwar1.0/ErrHandle.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral10
Sample
Clanwar1.0/ErrHandle.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Clanwar1.0/ErrorReport.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral12
Sample
Clanwar1.0/ErrorReport.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Clanwar1.0/EzIMClientModule.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral14
Sample
Clanwar1.0/EzIMClientModule.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Clanwar1.0/FNWar3.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral16
Sample
Clanwar1.0/FNWar3.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Clanwar1.0/GGWAR3.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral18
Sample
Clanwar1.0/GGWAR3.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Clanwar1.0/GHDx8.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral20
Sample
Clanwar1.0/GHDx8.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Clanwar1.0/GameStatDota.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral22
Sample
Clanwar1.0/GameStatDota.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Clanwar1.0/GetIPLoc.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral24
Sample
Clanwar1.0/GetIPLoc.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Clanwar1.0/HFAuthShell.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral26
Sample
Clanwar1.0/HFAuthShell.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Clanwar1.0/HFClanWar.exe
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral28
Sample
Clanwar1.0/HFClanWar.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Clanwar1.0/HFDLMgr.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral30
Sample
Clanwar1.0/HFDLMgr.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Clanwar1.0/HFEncrypt.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral32
Sample
Clanwar1.0/HFEncrypt.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
General
- Target Clanwar1.0/HFClanWar.exe
- Size 673KB
- Sample240721-2gebcsxhpc
- SHA256 997e2370b31427e7a6ee9af8a6034b504338bc2a00215388c5404a843671375f
- MD5 8d69cc085812dba14ff0f7772fad45ae
- SHA1 c97d1dcf4791363e576b52b2a512fd30e403fb4d
- SHA512 bdb2fca58f00b40ee7dee24215967eebf7d6a5f08aa6d5a410b8dbe094fbca5566120892b06cc29680aa15d98a448ba22e99ab726a6794412b960b40abc2197d
- SSDEEP 12288:7g4b/gQmWnIzHqIWiv2lUmaurOMk/CdIW8mjF06Xdj:7IQtXICKmaurQW8mjF0OJ
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 5020 HFClanWar.exe 5020 HFClanWar.exe 5020 HFClanWar.exe