Overview
overview
7Static
static
7JKHCW.exe
windows7-x64
7JKHCW.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$SYSDIR/ET99_FULL.dll
windows7-x64
3$SYSDIR/ET99_FULL.dll
windows10-2004-x64
3$SYSDIR/ET99_MOD.dll
windows7-x64
3$SYSDIR/ET99_MOD.dll
windows10-2004-x64
3$SYSDIR/grdes50.dll
windows7-x64
7$SYSDIR/grdes50.dll
windows10-2004-x64
7$SYSDIR/gregn50.dll
windows7-x64
7$SYSDIR/gregn50.dll
windows10-2004-x64
7$SYSDIR/midas.dll
windows7-x64
3$SYSDIR/midas.dll
windows10-2004-x64
3FT_ET99_API.dll
windows7-x64
3FT_ET99_API.dll
windows10-2004-x64
3JKHCW.chm
windows7-x64
1JKHCW.chm
windows10-2004-x64
1JKHCW.exe
windows7-x64
7JKHCW.exe
windows10-2004-x64
7Reg.dll
windows7-x64
3Reg.dll
windows10-2004-x64
3grdesigner50.exe
windows7-x64
7grdesigner50.exe
windows10-2004-x64
7uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7新云软件.url
windows7-x64
1新云软件.url
windows10-2004-x64
1Analysis
-
max time kernel
131s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22/08/2024, 16:26
Behavioral task
behavioral1
Sample
JKHCW.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
JKHCW.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$SYSDIR/ET99_FULL.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$SYSDIR/ET99_FULL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$SYSDIR/ET99_MOD.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
$SYSDIR/ET99_MOD.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$SYSDIR/grdes50.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$SYSDIR/grdes50.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$SYSDIR/gregn50.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$SYSDIR/gregn50.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$SYSDIR/midas.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$SYSDIR/midas.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
FT_ET99_API.dll
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
FT_ET99_API.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
JKHCW.chm
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
JKHCW.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
JKHCW.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
JKHCW.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Reg.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Reg.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
grdesigner50.exe
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
grdesigner50.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
uninst.exe
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
uninst.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
JKHCW.chm
-
Size
1.7MB
-
MD5
52ad268d7084ee25a8e5da10dda70b25
-
SHA1
b327086b932516057a8cac66b80dfcc6e64b5137
-
SHA256
947b7d6aa499d7d98890fe1a321fc4759c84853fe7e1568923749df1746ca903
-
SHA512
3564b8dd63d0181b2d527221c1c3e108d3cf5051bae1a335965711f6c9d068c678ab256ba6b0c90b36934612b03351bfcd45a42487965a772ef6e2fa8225c6cc
-
SSDEEP
49152:GIG2KMYDEJPWtjMysDqG2Lxw8yt/m2ZIZGuwuiTup:K2KMEEJPDbadw8yZIZ5jig
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 736 hh.exe 736 hh.exe