Overview

overview

7

Static

static

7

replacesetup.exe

windows7-x64

7

replacesetup.exe

windows10-2004-x64

7

Clash Pack....1.exe

windows7-x64

7

Clash Pack....1.exe

windows10-2004-x64

7

Sinicizati...er.exe

windows7-x64

7

Sinicizati...er.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

asar/linux...�.docx

windows7-x64

4

asar/linux...�.docx

windows10-2004-x64

1

Clash-for-...rer.js

windows7-x64

3

Clash-for-...rer.js

windows10-2004-x64

3

Clash-for-...ain.js

windows7-x64

3

Clash-for-...ain.js

windows10-2004-x64

3

Clash-for-...rer.js

windows7-x64

3

Clash-for-...rer.js

windows10-2004-x64

3

简易封�....1.exe

windows7-x64

7

简易封�....1.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    93s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-07-2024 16:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Clash-for-Windows_Chinese-CFA/chinese_file/Manual-Chinese/renderer.js

  • Size

    26KB

  • MD5

    ba6935c6d992b71accd5467a09ee7bb3

  • SHA1

    f7a75bacd8600f7cee0a93dc1742eddf22a3bec1

  • SHA256

    cfd0e485438de4cf06d97f3d024847d590b7fd09875ab5bffd7f8051ba0bb86f

  • SHA512

    0828f95465e773907f38ecb6b071c3520b6ea43553418e297124d68663b590325222f499260813dbd2417eebcf72c0a9681c0336a412f699ddf7e9aaf4cddcb5

  • SSDEEP

    384:aQxCrmDU45B9dwEwVjEqXZvEZjoor4ubFKvqGX3fj+pK0W/Lth/EcuaBD/B9ZVlG:LxvBFdINYj/k6whjf/EcnB99n3A

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Clash-for-Windows_Chinese-CFA\chinese_file\Manual-Chinese\renderer.js
    1⤵
      PID:4868

    Network

    MITRE ATT&CK Matrix ATT&CK v13

    Initial Access

    Execution

    Command and Scripting Interpreter

    1
    T1059

    JavaScript

    1
    T1059.007

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Resource Development

    Reconnaissance

    Replay Monitor

    Loading Replay Monitor...

    Downloads