Overview
overview
7Static
static
7Files/COMCTL32.dll
windows7-x64
3Files/COMCTL32.dll
windows10-2004-x64
3Files/CoreAudio.dll
windows7-x64
1Files/CoreAudio.dll
windows10-2004-x64
1Files/Core...pi.dll
windows7-x64
1Files/Core...pi.dll
windows10-2004-x64
1Files/Icons.dll
windows7-x64
7Files/Icons.dll
windows10-2004-x64
7Files/MSWINSCK.dll
windows7-x64
3Files/MSWINSCK.dll
windows10-2004-x64
3Files/RegAsm.exe
windows7-x64
3Files/RegAsm.exe
windows10-2004-x64
3Files/vb6chs.dll
windows7-x64
1Files/vb6chs.dll
windows10-2004-x64
1Files/新�...��.url
windows7-x64
1Files/新�...��.url
windows10-2004-x64
1Plugins/Ea...el.exe
windows7-x64
7Plugins/Ea...el.exe
windows10-2004-x64
7Plugins/Ea...ew.bak
windows7-x64
3Plugins/Ea...ew.bak
windows10-2004-x64
3Plugins/Ea...32.dll
windows7-x64
3Plugins/Ea...32.dll
windows10-2004-x64
3Plugins/LC...ck.exe
windows7-x64
7Plugins/LC...ck.exe
windows10-2004-x64
7Plugins/My...er.exe
windows7-x64
3Plugins/My...er.exe
windows10-2004-x64
3Plugins/Sl...ow.exe
windows7-x64
7Plugins/Sl...ow.exe
windows10-2004-x64
7Plugins/�...��.exe
windows7-x64
7Plugins/�...��.exe
windows10-2004-x64
7UpDate.exe
windows7-x64
7UpDate.exe
windows10-2004-x64
7Analysis
-
max time kernel
137s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/08/2024, 22:59
Behavioral task
behavioral1
Sample
Files/COMCTL32.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Files/COMCTL32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Files/CoreAudio.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Files/CoreAudio.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Files/CoreAudioApi.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Files/CoreAudioApi.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Files/Icons.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Files/Icons.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Files/MSWINSCK.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Files/MSWINSCK.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Files/RegAsm.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Files/RegAsm.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Files/vb6chs.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Files/vb6chs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Files/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Files/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Plugins/EasyPanel/EasyPanel.exe
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Plugins/EasyPanel/EasyPanel.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Plugins/EasyPanel/New.bak
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Plugins/EasyPanel/New.bak
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Plugins/EasyPanel/RICHTX32.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Plugins/EasyPanel/RICHTX32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Plugins/LCDClock/LCDClock.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Plugins/LCDClock/LCDClock.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Plugins/MyWeather/MyWeather.exe
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Plugins/MyWeather/MyWeather.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Plugins/SlideShow/SlideShow.exe
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Plugins/SlideShow/SlideShow.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Plugins/万年历/万年历.exe
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
Plugins/万年历/万年历.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
UpDate.exe
Resource
win7-20240704-en
General
-
Target
Plugins/LCDClock/LCDClock.exe
-
Size
37KB
-
MD5
35590967b63fa2be076a8a0dadb28a89
-
SHA1
5fbfa88451376a6d4f2fce0e7bb66f906d255c3f
-
SHA256
c9add118fb4aa6b9a822e2176dc14c03c6622147a0567d21dd7387e5098fc22f
-
SHA512
ce01b13e4078b7132531787c819012e8f093e78f8c684b5703fb50f69ecf2b724bdc49d9f6090b6a4ff224e905a443ffb94adaad281955e58f6dc411c5dcc30a
-
SSDEEP
768:Z8oyaUfqr7JQ436veEpUxDCL3wmQ9Ab/GfreTVPJr2ZEX9d:LyaxfJIeMnLzQSGfwB
Malware Config
Signatures
-
resource yara_rule behavioral24/memory/2664-0-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral24/memory/2664-4-0x0000000000400000-0x000000000042C000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language LCDClock.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2664 LCDClock.exe