Overview
overview
10Static
static
10VDFilterPack.exe
windows7-x64
7VDFilterPack.exe
windows10-2004-x64
7Video Enha...��.bat
windows7-x64
3Video Enha...��.bat
windows10-2004-x64
3Video Enha...��.bat
windows7-x64
3Video Enha...��.bat
windows10-2004-x64
3Video Enha...om.url
windows7-x64
1Video Enha...om.url
windows10-2004-x64
1Video Enha...er.dll
windows7-x64
1Video Enha...er.dll
windows10-2004-x64
1Video Enha...SR.dll
windows7-x64
1Video Enha...SR.dll
windows10-2004-x64
1Video Enha...ax.dll
windows7-x64
1Video Enha...ax.dll
windows10-2004-x64
1Video Enha...er.dll
windows7-x64
1Video Enha...er.dll
windows10-2004-x64
1Video Enha...AN.dll
windows7-x64
3Video Enha...AN.dll
windows10-2004-x64
3Video Enha...BW.dll
windows7-x64
3Video Enha...BW.dll
windows10-2004-x64
3Video Enha...ce.dll
windows7-x64
3Video Enha...ce.dll
windows10-2004-x64
3Video Enha...35.dll
windows7-x64
3Video Enha...35.dll
windows10-2004-x64
3Video Enha...ce.dll
windows7-x64
3Video Enha...ce.dll
windows10-2004-x64
3Video Enha...ed.dll
windows7-x64
3Video Enha...ed.dll
windows10-2004-x64
3Video Enha...er.dll
windows7-x64
7Video Enha...er.dll
windows10-2004-x64
7Video Enha....8.dll
windows7-x64
7Video Enha....8.dll
windows10-2004-x64
7Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
21/07/2024, 18:40
Behavioral task
behavioral1
Sample
VDFilterPack.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral2
Sample
VDFilterPack.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Video Enhancerv2013汉化绿色破解版/!)卸载.bat
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral4
Sample
Video Enhancerv2013汉化绿色破解版/!)卸载.bat
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Video Enhancerv2013汉化绿色破解版/!)绿化.bat
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral6
Sample
Video Enhancerv2013汉化绿色破解版/!)绿化.bat
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Video Enhancerv2013汉化绿色破解版/@绿化-无广告Greenhua.com.url
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral8
Sample
Video Enhancerv2013汉化绿色破解版/@绿化-无广告Greenhua.com.url
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Video Enhancerv2013汉化绿色破解版/Parallelizer.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral10
Sample
Video Enhancerv2013汉化绿色破解版/Parallelizer.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Video Enhancerv2013汉化绿色破解版/SR.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral12
Sample
Video Enhancerv2013汉化绿色破解版/SR.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Video Enhancerv2013汉化绿色破解版/SR.ax.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral14
Sample
Video Enhancerv2013汉化绿色破解版/SR.ax.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Video Enhancerv2013汉化绿色破解版/VDFilter.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral16
Sample
Video Enhancerv2013汉化绿色破解版/VDFilter.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/2DCLEAN.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral18
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/2DCLEAN.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/ACOBW.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral20
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/ACOBW.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/AsvzzzDeinterlace.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral22
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/AsvzzzDeinterlace.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/BrdCntrl235.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral24
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/BrdCntrl235.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/Deinterlace.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral26
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/Deinterlace.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/DeinterlaceAreaBased.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral28
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/DeinterlaceAreaBased.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/MSU_Cartoonizer.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral30
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/MSU_Cartoonizer.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/MSU_SmartDeblock_0.8.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral32
Sample
Video Enhancerv2013汉化绿色破解版/VDFilterPack/MSU_SmartDeblock_0.8.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
General
-
Target
Video Enhancerv2013汉化绿色破解版/VDFilterPack/AsvzzzDeinterlace.dll
-
Size
44KB
-
MD5
ae479dbd43b1d29ef37a0d8afdfc6d58
-
SHA1
b306f5d8dc107e6320692488585b954c3d91eeec
-
SHA256
550aa29333078f3747333e1f5acc3fc78d4a95d163b7461a7882ce65f4a03cd0
-
SHA512
368dfdd0f5dd7a578df3ab2a9e85f7d313352347be7b639ba30842c707edbb0d42f1e9e3ac88686952221d0017437cdc6fd920217b6c476fa98809caab34b09f
-
SSDEEP
384:tdESvTdKmnV4PnnWJUVkZEF37sJu6UMLl3jyiF0asWmuO4H5KvJKnmq1tSzeVJ:sSvTdKmV4/aZC3EVjUasWmwuJK2w
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2100 2088 WerFault.exe 30 -
Suspicious use of WriteProcessMemory 11 IoCs
description pid Process procid_target PID 836 wrote to memory of 2088 836 rundll32.exe 30 PID 836 wrote to memory of 2088 836 rundll32.exe 30 PID 836 wrote to memory of 2088 836 rundll32.exe 30 PID 836 wrote to memory of 2088 836 rundll32.exe 30 PID 836 wrote to memory of 2088 836 rundll32.exe 30 PID 836 wrote to memory of 2088 836 rundll32.exe 30 PID 836 wrote to memory of 2088 836 rundll32.exe 30 PID 2088 wrote to memory of 2100 2088 rundll32.exe 31 PID 2088 wrote to memory of 2100 2088 rundll32.exe 31 PID 2088 wrote to memory of 2100 2088 rundll32.exe 31 PID 2088 wrote to memory of 2100 2088 rundll32.exe 31
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Video Enhancerv2013汉化绿色破解版\VDFilterPack\AsvzzzDeinterlace.dll",#11⤵
- Suspicious use of WriteProcessMemory
PID:836 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Video Enhancerv2013汉化绿色破解版\VDFilterPack\AsvzzzDeinterlace.dll",#12⤵
- Suspicious use of WriteProcessMemory
PID:2088 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2088 -s 2243⤵
- Program crash
PID:2100
-
-