Overview
overview
3Static
static
3155绿色�...��.url
windows7-x64
1155绿色�...��.url
windows10-2004-x64
1ICSharpCod...ib.dll
windows7-x64
1ICSharpCod...ib.dll
windows10-2004-x64
1Interop.Qu...ib.dll
windows7-x64
1Interop.Qu...ib.dll
windows10-2004-x64
1Jayrock.Json.dll
windows7-x64
1Jayrock.Json.dll
windows10-2004-x64
1Jayrock.dll
windows7-x64
1Jayrock.dll
windows10-2004-x64
1Jint.dll
windows7-x64
1Jint.dll
windows10-2004-x64
1Microsoft.mshtml.dll
windows7-x64
1Microsoft.mshtml.dll
windows10-2004-x64
1UpdateOnline.exe
windows7-x64
1UpdateOnline.exe
windows10-2004-x64
1log4net.dll
windows7-x64
1log4net.dll
windows10-2004-x64
1mymsg.htm
windows7-x64
3mymsg.htm
windows10-2004-x64
3skincrafte...05.dll
windows7-x64
3skincrafte...05.dll
windows10-2004-x64
3对时软件.exe
windows7-x64
3对时软件.exe
windows10-2004-x64
3算法小�...��.exe
windows7-x64
1算法小�...��.exe
windows10-2004-x64
3蹭饭小黑.exe
windows7-x64
1蹭饭小黑.exe
windows10-2004-x64
1运行不�...��.exe
windows7-x64
3运行不�...��.exe
windows10-2004-x64
3Analysis
-
max time kernel
145s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
17/08/2024, 01:10
Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
ICSharpCode.SharpZipLib.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Interop.QuartzTypeLib.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Interop.QuartzTypeLib.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Jayrock.Json.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Jayrock.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Jayrock.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Jayrock.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Jint.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Jint.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Microsoft.mshtml.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
Microsoft.mshtml.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
UpdateOnline.exe
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
UpdateOnline.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
log4net.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
log4net.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
mymsg.htm
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
mymsg.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
skincrafter.net-vs2005.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
skincrafter.net-vs2005.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
对时软件.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
对时软件.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
算法小黑-农场牧场餐厅算法检测工具.exe
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
算法小黑-农场牧场餐厅算法检测工具.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
蹭饭小黑.exe
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
蹭饭小黑.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
运行不了点击这文件.exe
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
运行不了点击这文件.exe
Resource
win10v2004-20240802-en
General
-
Target
UpdateOnline.exe
-
Size
51KB
-
MD5
03d3d8dc528caf56ecc4f7e66dc4bf52
-
SHA1
925716a99829df1d87655aed5b678a940746f3a4
-
SHA256
43be7ef2cfa4e2d03b094ce8c9d9b39c94286bb8917548fbe7f9f6f442cd86b6
-
SHA512
ea3346c2e0a53cbf6ce902a8c4f85de6470283ca3febf827fb0bc698907a7b19e0e41038deecba14e784dcceebfdd038d62bfd0d860dc5fd22c417fc32689342
-
SSDEEP
768:zVJp7gvUSYwZLHSK9Hj6giPB0tZ5IJJYIbzuuo+PB0tZ5IJJYIbzuuoN:dgvHZLF9H+g/MJYEup7MJYEupN
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2484 UpdateOnline.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2484 UpdateOnline.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2484 UpdateOnline.exe 2484 UpdateOnline.exe