Overview
overview
7Static
static
33225e0494b...30.exe
windows7-x64
73225e0494b...30.exe
windows10-2004-x64
7$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3LICENSES.c...m.html
windows7-x64
3LICENSES.c...m.html
windows10-2004-x64
3d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
1libEGL.dll
windows7-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows7-x64
1libGLESv2.dll
windows10-2004-x64
1resources/elevate.exe
windows7-x64
3resources/elevate.exe
windows10-2004-x64
3resources/...ck.exe
windows7-x64
1resources/...ck.exe
windows10-2004-x64
7resources/...xy.exe
windows7-x64
3resources/...xy.exe
windows10-2004-x64
3resources/...64.exe
windows7-x64
1resources/...64.exe
windows10-2004-x64
1resources/...ce.exe
windows7-x64
resources/...ce.exe
windows10-2004-x64
resources/...ce.exe
windows7-x64
1resources/...ce.exe
windows10-2004-x64
1resources/...ce.exe
windows7-x64
1Analysis
-
max time kernel
24s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
03/08/2024, 01:41
Static task
static1
Behavioral task
behavioral1
Sample
3225e0494bede3a150a89583c9a10545a4b21c304dad620e9659708b5162b730.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3225e0494bede3a150a89583c9a10545a4b21c304dad620e9659708b5162b730.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
LICENSES.chromium.html
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
LICENSES.chromium.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
d3dcompiler_47.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
ffmpeg.dll
Resource
win7-20240704-en
Behavioral task
behavioral15
Sample
ffmpeg.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
libEGL.dll
Resource
win7-20240705-en
Behavioral task
behavioral17
Sample
libEGL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
libGLESv2.dll
Resource
win7-20240704-en
Behavioral task
behavioral19
Sample
libGLESv2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
resources/elevate.exe
Resource
win7-20240708-en
Behavioral task
behavioral21
Sample
resources/elevate.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
resources/static/files/win/common/EnableLoopback.exe
Resource
win7-20240704-en
Behavioral task
behavioral23
Sample
resources/static/files/win/common/EnableLoopback.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
resources/static/files/win/common/sysproxy.exe
Resource
win7-20240708-en
Behavioral task
behavioral25
Sample
resources/static/files/win/common/sysproxy.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
resources/static/files/win/x64/clash-win64.exe
Resource
win7-20240708-en
Behavioral task
behavioral27
Sample
resources/static/files/win/x64/clash-win64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
resources/static/files/win/x64/service/._clash-core-service.exe
Resource
win7-20240705-en
Behavioral task
behavioral29
Sample
resources/static/files/win/x64/service/._clash-core-service.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
resources/static/files/win/x64/service/clash-core-service.exe
Resource
win7-20240704-en
Behavioral task
behavioral31
Sample
resources/static/files/win/x64/service/clash-core-service.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
resources/static/files/win/x64/service/service.exe
Resource
win7-20240729-en
General
-
Target
resources/static/files/win/x64/service/service.exe
-
Size
667KB
-
MD5
dfac85571d69882cbe7e106fb658a941
-
SHA1
83561bdb596dc7b8624f42ca812525c826e118ea
-
SHA256
2c93d1c50400410f019ca0ebb56b2c5229c710a84d2c5d97235088d173839a24
-
SHA512
7393c6dc3b6911b12cc152d0d1feecb67bba5844eb267bd61023b192a814d4ec3bafb60ce28a3831aca6b0dbbeaf97b619dc9f6a54de070a3ea1abd827656034
-
SSDEEP
6144:eP1QeixLdx4whZP0FTqm1QejJqzrEinqE7qu2t1SVhPBL1mICLiwI39x/G48hF:Heibx1LPUTqmCKCRVvL4IC9f
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 408 service.exe