Overview

overview

7

Static

static

3

3225e0494b...30.exe

windows7-x64

7

3225e0494b...30.exe

windows10-2004-x64

7

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

LICENSES.c...m.html

windows7-x64

3

LICENSES.c...m.html

windows10-2004-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows7-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows7-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows7-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/elevate.exe

windows7-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/...ck.exe

windows7-x64

1

resources/...ck.exe

windows10-2004-x64

7

resources/...xy.exe

windows7-x64

3

resources/...xy.exe

windows10-2004-x64

3

resources/...64.exe

windows7-x64

1

resources/...64.exe

windows10-2004-x64

1

resources/...ce.exe

windows7-x64

resources/...ce.exe

windows10-2004-x64

resources/...ce.exe

windows7-x64

1

resources/...ce.exe

windows10-2004-x64

1

resources/...ce.exe

windows7-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    03/08/2024, 01:41 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    resources/static/files/win/x64/clash-win64.exe

  • Size

    14.7MB

  • MD5

    eb18aec5944b675e830e6703dcf68a93

  • SHA1

    b80d2182ed6dc32eba28f9820e78f65c5ff2d926

  • SHA256

    9f99832c74df2db543144e691f608c4519bb24282573a039300030dd6acf237f

  • SHA512

    63c775dc682a8487025dec60bb268c54b5f890fe2bdf905493f6aabec7bde49c9a2f8b726e21ab23327f1ebcea55c602f03f664b36f1759c4d8519cf440f199f

  • SSDEEP

    98304:VENDsOdDk06ZJzEuHEivTpJyhD+ginZ8+Hk4Wg3EOibUNsvAw:VA9KJKmTpJqDsZmg0V1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\resources\static\files\win\x64\clash-win64.exe
    "C:\Users\Admin\AppData\Local\Temp\resources\static\files\win\x64\clash-win64.exe"
    1⤵
      PID:2308

    Network

    • flag-us
      DNS
      cdn.jsdelivr.net
      clash-win64.exe
      Remote address:
      8.8.8.8:53
      Request
      cdn.jsdelivr.net
      IN A
      Response
      cdn.jsdelivr.net
      IN CNAME
      jsdelivr.map.fastly.net
      jsdelivr.map.fastly.net
      IN A
      151.101.65.229
      jsdelivr.map.fastly.net
      IN A
      151.101.193.229
      jsdelivr.map.fastly.net
      IN A
      151.101.129.229
      jsdelivr.map.fastly.net
      IN A
      151.101.1.229
    • 151.101.65.229:443
      cdn.jsdelivr.net
      tls
      clash-win64.exe
      766 B
       5.3kB
       10
      10
    • 8.8.8.8:53
      cdn.jsdelivr.net
      dns
      clash-win64.exe
      62 B
       160 B
       1
      1

      DNS Request

      cdn.jsdelivr.net

      DNS Response

      151.101.65.229
      151.101.193.229
      151.101.129.229
      151.101.1.229

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\CabA0E3.tmp
      Filesize

      70KB

      MD5

      49aebf8cbd62d92ac215b2923fb1b9f5

      SHA1

      1723be06719828dda65ad804298d0431f6aff976

      SHA256

      b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

      SHA512

      bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\TarA134.tmp
      Filesize

      181KB

      MD5

      4ea6026cf93ec6338144661bf1202cd1

      SHA1

      a1dec9044f750ad887935a01430bf49322fbdcb7

      SHA256

      8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

      SHA512

      6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

      Download Submit

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.