Overview
overview
7Static
static
7Easyresume...up.exe
windows7-x64
7Easyresume...up.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Resume.exe
windows7-x64
3Resume.exe
windows10-2004-x64
3help.chm
windows7-x64
1help.chm
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7update.exe
windows7-x64
7update.exe
windows10-2004-x64
7Easyresume...��.url
windows7-x64
1Easyresume...��.url
windows10-2004-x64
1Analysis
-
max time kernel
134s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23-07-2024 22:05
Behavioral task
behavioral1
Sample
Easyresume/Easyresume7_setup.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Easyresume/Easyresume7_setup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Resume.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Resume.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
help.chm
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
help.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
uninst.exe
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
uninst.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
update.exe
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
update.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
Easyresume/非常世纪资源网.url
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Easyresume/非常世纪资源网.url
Resource
win10v2004-20240709-en
General
-
Target
help.chm
-
Size
183KB
-
MD5
e0d7aac551f066b5a6d33c6b243a8678
-
SHA1
fed652ad98f3a4e06d67ad78e97fe191f95f042d
-
SHA256
13a2646da91ddec70f3b1bfd048d1e8f40a89a2d66591e5767ab6238ed66818d
-
SHA512
8c982a79a67948eeb2fa68ec1285fc45adf63066fbe8b7430a24edf56d5dff6b12ad4583d487a1bc8f03ccfeaf3b6a2de3ecedaa838466fa4f025ffe27187b31
-
SSDEEP
3072:LcENhZCkMG9b53aq9eNl9SoX4S1dXX3W1tjhvmz5rDmK2Tt2SJcr+Y89Cukl4urr:LcqZJMWbBmNlNX4S/XXm1f+xDy2SWqYt
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3640 hh.exe 3640 hh.exe