Overview
overview
3Static
static
32005121611...Vid.js
windows7-x64
32005121611...Vid.js
windows10-2004-x64
32005121611...nit.js
windows7-x64
32005121611...nit.js
windows10-2004-x64
32005121611...nit.js
windows7-x64
32005121611...nit.js
windows10-2004-x64
32005121611...lp.chm
windows7-x64
12005121611...lp.chm
windows10-2004-x64
12005121611...GB.exe
windows7-x64
32005121611...GB.exe
windows10-2004-x64
32005121611...ain.js
windows7-x64
32005121611...ain.js
windows10-2004-x64
32005121611...tor.js
windows7-x64
32005121611...tor.js
windows10-2004-x64
32005121611...ata.js
windows7-x64
32005121611...ata.js
windows10-2004-x64
32005121611...ers.js
windows7-x64
32005121611...ers.js
windows10-2004-x64
32005121611...con.js
windows7-x64
32005121611...con.js
windows10-2004-x64
32005121611...ing.js
windows7-x64
32005121611...ing.js
windows10-2004-x64
32005121611...ld.bat
windows7-x64
12005121611...ld.bat
windows10-2004-x64
12005121611...nit.js
windows7-x64
32005121611...nit.js
windows10-2004-x64
32005121611...ver.js
windows7-x64
32005121611...ver.js
windows10-2004-x64
32005121611...cEx.js
windows7-x64
32005121611...cEx.js
windows10-2004-x64
32005121611...ers.js
windows7-x64
32005121611...ers.js
windows10-2004-x64
3Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2024, 08:23
Static task
static1
Behavioral task
behavioral1
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/DelphiVid.js
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/DelphiVid.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/DlgshowUnit.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/DlgshowUnit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/FTPServerUnit.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/FTPServerUnit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Help.chm
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Help.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Languages/Big5GB.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Languages/Big5GB.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Main.js
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/Main.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/MsgSimulator.js
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/MsgSimulator.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/SkinData.js
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/SkinData.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/headers.js
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/headers.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/icotool/unitExIcon.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/icotool/unitExIcon.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/mixing.js
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
2005121611581996/2005121611581996/HgzVip1.2/Client/mixing.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/Clearold.bat
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/Clearold.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/DlgshowUnit.js
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/DlgshowUnit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/MainServer.js
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/MainServer.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/WinSvcEx.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/WinSvcEx.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/headers.js
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
2005121611581996/2005121611581996/HgzVip1.2/Server/headers.js
Resource
win10v2004-20240802-en
General
-
Target
2005121611581996/2005121611581996/HgzVip1.2/Client/Help.chm
-
Size
132KB
-
MD5
60072afd2dff52ee3083c46a00568ebe
-
SHA1
a0041f20bf2d325e58ac4b719fb89f5697586037
-
SHA256
b6849f70ac08cc2e46eb7fec30a21d6f9b8f9f68d5da4c6bf6573ab39290a285
-
SHA512
5982bce2f347dee8c83562cf03c03cbcf7f7d7d1bb866b0c227bd9145dfcda7641da324df46111ba0c0bfed05809f2e3e364baf5a17dd70707aedbd5aced1e07
-
SSDEEP
3072:uIXWF09MR82NfXBQ/FuztLWzUtlGhrJ78tk5izi9uX9s3fH8fsF:uIk+W8Mf6FuhLgMlGxJYtacWN8i
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3984 hh.exe 3984 hh.exe