Overview
overview
3Static
static
1Recorder_2.3.0/7z.dll
windows7-x64
3Recorder_2.3.0/7z.dll
windows10-2004-x64
3Recorder_2...ab.dll
windows7-x64
3Recorder_2...ab.dll
windows10-2004-x64
3Recorder_2...ta.sys
windows7-x64
1Recorder_2...ta.sys
windows10-2004-x64
1Recorder_2...Xp.sys
windows7-x64
1Recorder_2...Xp.sys
windows10-2004-x64
1Recorder_2...gR.sys
windows7-x64
1Recorder_2...gR.sys
windows10-2004-x64
1Recorder_2...gr.dll
windows7-x64
3Recorder_2...gr.dll
windows10-2004-x64
3Recorder_2...er.exe
windows7-x64
3Recorder_2...er.exe
windows10-2004-x64
3Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
11-08-2024 06:57
Static task
static1
Behavioral task
behavioral1
Sample
Recorder_2.3.0/7z.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Recorder_2.3.0/7z.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Recorder_2.3.0/Cab.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Recorder_2.3.0/Cab.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Recorder_2.3.0/Drivers/XiaobaiFsRForVista.sys
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Recorder_2.3.0/Drivers/XiaobaiFsRForVista.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Recorder_2.3.0/Drivers/XiaobaiFsRForXp.sys
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Recorder_2.3.0/Drivers/XiaobaiFsRForXp.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Recorder_2.3.0/Drivers/XiaobaiRegR.sys
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Recorder_2.3.0/Drivers/XiaobaiRegR.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Recorder_2.3.0/DrvMgr.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Recorder_2.3.0/DrvMgr.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Recorder_2.3.0/Recorder.exe
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
Recorder_2.3.0/Recorder.exe
Resource
win10v2004-20240802-en
General
-
Target
Recorder_2.3.0/Drivers/XiaobaiFsRForVista.sys
-
Size
96KB
-
MD5
1a3bcc9a5f6e58a705c6cb908bc5c87a
-
SHA1
6bf1318343ae64ff0f989ffa39b50119720d08a1
-
SHA256
132dcd5b9fd4fb9d3c18ba5df7e942c9e742af569c8f366232786431e853973b
-
SHA512
e8617aa556c1107d0ec84f2f70bf9379b28e4a62ec72dad10918ca484d7cad5fd982063389d3bc65569a7db5a5b14f9b7fdf522ffa6d0d98a1eff5dbf115abb0
-
SSDEEP
1536:4DQne/51VxdtMdj55Ncl0s6DwzSlz5eI3o2nEV95XojVVwFaO:PnK1lCdjtcl0th5NVa/XoRVq
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Recorder_2.3.0\Drivers\XiaobaiFsRForVista.sys1⤵PID:2876
-
C:\Users\Admin\AppData\Local\Temp\Recorder_2.3.0\Drivers\XiaobaiFsRForVista.sysC:\Users\Admin\AppData\Local\Temp\Recorder_2.3.0\Drivers\XiaobaiFsRForVista.sys2⤵PID:2704
-