Overview
overview
3Static
static
3游戏万�...M9.exe
windows7-x64
3游戏万�...M9.exe
windows10-2004-x64
3游戏万�...on.dll
windows7-x64
1游戏万�...on.dll
windows10-2004-x64
1游戏万�...ce.exe
windows7-x64
3游戏万�...ce.exe
windows10-2004-x64
3游戏万�...ll.dll
windows7-x64
3游戏万�...ll.dll
windows10-2004-x64
3游戏万�...er.exe
windows7-x64
1游戏万�...er.exe
windows10-2004-x64
1游戏万�...et.dll
windows7-x64
3游戏万�...et.dll
windows10-2004-x64
3游戏万�...rd.exe
windows7-x64
3游戏万�...rd.exe
windows10-2004-x64
3游戏万�...2a.dll
windows7-x64
3游戏万�...2a.dll
windows10-2004-x64
3游戏万�...LL.dll
windows7-x64
3游戏万�...LL.dll
windows10-2004-x64
3游戏万�...UI.dll
windows7-x64
3游戏万�...UI.dll
windows10-2004-x64
3游戏万�...ry.vbs
windows7-x64
1游戏万�...ry.vbs
windows10-2004-x64
1游戏万�...ch.vbs
windows7-x64
1游戏万�...ch.vbs
windows10-2004-x64
1游戏万�...om.vbs
windows7-x64
1游戏万�...om.vbs
windows10-2004-x64
1游戏万�...an.vbs
windows7-x64
1游戏万�...an.vbs
windows10-2004-x64
1游戏万�...em.vbs
windows7-x64
1游戏万�...em.vbs
windows10-2004-x64
1游戏万�...��.url
windows7-x64
1游戏万�...��.url
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
06-09-2024 16:28
Static task
static1
Behavioral task
behavioral1
Sample
游戏万能修改器9.0/GM9.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
游戏万能修改器9.0/GM9.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
游戏万能修改器9.0/GMIcon.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
游戏万能修改器9.0/GMIcon.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
游戏万能修改器9.0/GMIconService.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
游戏万能修改器9.0/GMIconService.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
游戏万能修改器9.0/GMdll.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
游戏万能修改器9.0/GMdll.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
游戏万能修改器9.0/NetServer.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
游戏万能修改器9.0/NetServer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
游戏万能修改器9.0/Packet.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
游戏万能修改器9.0/Packet.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
游戏万能修改器9.0/TrainerWizard.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
游戏万能修改器9.0/TrainerWizard.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
游戏万能修改器9.0/m2a.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
游戏万能修改器9.0/m2a.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
游戏万能修改器9.0/sLib/FILEDLL.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
游戏万能修改器9.0/sLib/FILEDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
游戏万能修改器9.0/sLib/GUI.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
游戏万能修改器9.0/sLib/GUI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
游戏万能修改器9.0/sLib/gmemory.vbs
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
游戏万能修改器9.0/sLib/gmemory.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
游戏万能修改器9.0/sLib/swizard/batch.vbs
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
游戏万能修改器9.0/sLib/swizard/batch.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
游戏万能修改器9.0/sLib/swizard/random.vbs
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
游戏万能修改器9.0/sLib/swizard/random.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
游戏万能修改器9.0/sLib/swizard/scan.vbs
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
游戏万能修改器9.0/sLib/swizard/scan.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
游戏万能修改器9.0/sLib/system.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
游戏万能修改器9.0/sLib/system.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
游戏万能修改器9.0/游迅网.url
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
游戏万能修改器9.0/游迅网.url
Resource
win10v2004-20240802-en
General
-
Target
游戏万能修改器9.0/TrainerWizard.exe
-
Size
6.6MB
-
MD5
829a8342c5029ae1ee5bbe87ed02bd93
-
SHA1
cff13625c7cfe2b1079aeb5d1c895bfc4ba13360
-
SHA256
c68a3198dc78c65e1ef3418bba718c3252c1fa1f7b1d5f4de8e15879db36cae9
-
SHA512
04e5d31a6709c4bcd645fd9010bd14533179e574ffdf21fe0533c6c9a388d14bf43ca5c8b26e0b0514aca688bfa86e5b02c5363cd01f0961a075eda6fb7391de
-
SSDEEP
98304:M/0MwcnIpWSeQlKmidRvJYkcOIZum/+zXsUF47tGs6uA6LInHCjUFN:Ml0YPJzyJ2rsUS74XiLInHa6
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TrainerWizard.exe