Overview

overview

7

Static

static

7

replacesetup.exe

windows7-x64

7

replacesetup.exe

windows10-2004-x64

7

Clash Pack....1.exe

windows7-x64

7

Clash Pack....1.exe

windows10-2004-x64

7

Sinicizati...er.exe

windows7-x64

7

Sinicizati...er.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

asar/linux...�.docx

windows7-x64

4

asar/linux...�.docx

windows10-2004-x64

1

Clash-for-...rer.js

windows7-x64

3

Clash-for-...rer.js

windows10-2004-x64

3

Clash-for-...ain.js

windows7-x64

3

Clash-for-...ain.js

windows10-2004-x64

3

Clash-for-...rer.js

windows7-x64

3

Clash-for-...rer.js

windows10-2004-x64

3

简易封�....1.exe

windows7-x64

7

简易封�....1.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    93s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-07-2024 16:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Clash-for-Windows_Chinese-CFA/chinese_file/Sinicization_files/renderer.js

  • Size

    3.7MB

  • MD5

    bf7483c43246bd05bd03f58a38aa894a

  • SHA1

    e05c3e576c4de9a9a06a8b20921970b2df5280af

  • SHA256

    b4990b17edd05f87cf784aeebdc35e72d02816cc9b2b81dac78c8096135bc4f2

  • SHA512

    430bb90a796d2d8eea16eda362436a9b4d950e65df641236af445a3bf297220c3744ecd6baaf24f6b6c166ecdcbd9ba228dab0fb019e72b948c0f5cdc648c38c

  • SSDEEP

    49152:6E5SRqCXYkFZr9YBW4fVy/d4SH7h337aMmOrvTL34K2OzZX2ZpqcRjGldKWkW+bH:3

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Clash-for-Windows_Chinese-CFA\chinese_file\Sinicization_files\renderer.js
    1⤵
      PID:4176

    Network

    MITRE ATT&CK Matrix ATT&CK v13

    Initial Access

    Execution

    Command and Scripting Interpreter

    1
    T1059

    JavaScript

    1
    T1059.007

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Resource Development

    Reconnaissance

    Replay Monitor

    Loading Replay Monitor...

    Downloads