Overview
overview
7Static
static
336096d4b30...08.exe
windows7-x64
736096d4b30...08.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Fm.exe
windows7-x64
3Fm.exe
windows10-2004-x64
3Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7fm.chm
windows7-x64
1fm.chm
windows10-2004-x64
1fmadmin.exe
windows7-x64
3fmadmin.exe
windows10-2004-x64
3fmsprt.dll
windows7-x64
3fmsprt.dll
windows10-2004-x64
3inteng14x.dll
windows7-x64
3inteng14x.dll
windows10-2004-x64
3smtpsend.dll
windows7-x64
3smtpsend.dll
windows10-2004-x64
3tranretr.dll
windows7-x64
3tranretr.dll
windows10-2004-x64
3Analysis
-
max time kernel
93s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03/08/2024, 00:54
Static task
static1
Behavioral task
behavioral1
Sample
36096d4b30cf0f34cd0be564688532d8b36cc4b374457f66e463f8aefb66c908.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36096d4b30cf0f34cd0be564688532d8b36cc4b374457f66e463f8aefb66c908.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Fm.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Fm.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Uninstall.exe
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
fm.chm
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
fm.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
fmadmin.exe
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
fmadmin.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
fmsprt.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
fmsprt.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
inteng14x.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
inteng14x.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
smtpsend.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
smtpsend.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
tranretr.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
tranretr.dll
Resource
win10v2004-20240802-en
General
-
Target
fm.chm
-
Size
871KB
-
MD5
95b7428bec45b9513b3ad15f91216a6b
-
SHA1
ac3d45d226480d3b1e952cc8a0530e0a78273a9c
-
SHA256
4e3dd3f7302c5e443ac7499ea0088632626d2459f741de5433dbc8fc8908645d
-
SHA512
97b9a01e088f734a4547b33e26d80d6a9d76984818c741ddd44b42a02d6cc6da6ccab37feb162049aab28646f53de90af0e4d9768b3b27189c1c675b9e63fde3
-
SSDEEP
24576:+J292AUSNVAO+nuGtXpUPgO0C59Kyi0/xYnwLs:+o92AUSNaxCIOH+zyYnx
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1344 hh.exe 1344 hh.exe