Overview
overview
3Static
static
32005121611...Vid.js
windows7-x64
32005121611...Vid.js
windows10-2004-x64
32005121611...nit.js
windows7-x64
32005121611...nit.js
windows10-2004-x64
32005121611...nit.js
windows7-x64
32005121611...nit.js
windows10-2004-x64
32005121611...lp.chm
windows7-x64
12005121611...lp.chm
windows10-2004-x64
12005121611...GB.exe
windows7-x64
32005121611...GB.exe
windows10-2004-x64
32005121611...ain.js
windows7-x64
32005121611...ain.js
windows10-2004-x64
32005121611...tor.js
windows7-x64
32005121611...tor.js
windows10-2004-x64
32005121611...ata.js
windows7-x64
32005121611...ata.js
windows10-2004-x64
32005121611...ers.js
windows7-x64
32005121611...ers.js
windows10-2004-x64
32005121611...con.js
windows7-x64
32005121611...con.js
windows10-2004-x64
32005121611...ing.js
windows7-x64
32005121611...ing.js
windows10-2004-x64
32005121611...ld.bat
windows7-x64
12005121611...ld.bat
windows10-2004-x64
12005121611...nit.js
windows7-x64
32005121611...nit.js
windows10-2004-x64
32005121611...ver.js
windows7-x64
32005121611...ver.js
windows10-2004-x64
32005121611...cEx.js
windows7-x64
32005121611...cEx.js
windows10-2004-x64
32005121611...ers.js
windows7-x64
32005121611...ers.js
windows10-2004-x64
3Analysis
-
max time kernel
15s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
18-08-2024 08:23
Static task
static1
Behavioral task
behavioral1
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/DelphiVid.js
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/DelphiVid.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/DlgshowUnit.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/DlgshowUnit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/FTPServerUnit.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/FTPServerUnit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Help.chm
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Help.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Languages/Big5GB.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Languages/Big5GB.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Main.js
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Main.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/MsgSimulator.js
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/MsgSimulator.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/SkinData.js
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/SkinData.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/headers.js
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/headers.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/icotool/unitExIcon.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/icotool/unitExIcon.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/mixing.js
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/mixing.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/Clearold.bat
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/Clearold.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/DlgshowUnit.js
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/DlgshowUnit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/MainServer.js
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/MainServer.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/WinSvcEx.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/WinSvcEx.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/headers.js
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/headers.js
Resource
win10v2004-20240802-en
General
-
Target
2005121611581996/2005121611581996/HgzVip1.2/Client/FTPServerUnit.js
-
Size
5KB
-
MD5
d524255875d2be4b26847955d515278d
-
SHA1
c04c438a2e954affd3041b5d1c8b8e654a37137f
-
SHA256
f23f6a2b1982cf5a39c2819b987c93aa6a92889d1b2d7fca7eaade7483e8b473
-
SHA512
68fdc370c8b8691867e6c39dd460dd637c5cf49f6143eef0d3450cf678899e7aad29bd99f5d942f6ab41b145d55a8837d64f6a3026f372027434d052b1ae7772
-
SSDEEP
96:ugzwBi5QI+dNq3NHpBiEUM6/wh/wHA7Qz+ddC7j2p9TvjvSlMmJLujHkOSG83QFz:x1iNq3NHpBirMMwtwHiWcwMmBujEOSGT
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs