Overview
overview
3Static
static
3RamSmash/ramsmash.dll
windows7-x64
3RamSmash/ramsmash.dll
windows10-2004-x64
3RamSmash/ramsmash.exe
windows7-x64
1RamSmash/ramsmash.exe
windows10-2004-x64
3RamSmash/s...��.exe
windows7-x64
3RamSmash/s...��.exe
windows10-2004-x64
3RamSmash/�...��.url
windows7-x64
1RamSmash/�...��.url
windows10-2004-x64
1Analysis
- max time kernel
125s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
11/09/2024, 10:57
Static task
static1
Behavioral task
behavioral1
Sample
RamSmash/ramsmash.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
RamSmash/ramsmash.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
RamSmash/ramsmash.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
RamSmash/ramsmash.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
RamSmash/soft2cn.com汉化说明.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
RamSmash/soft2cn.com汉化说明.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral7
Sample
RamSmash/未来软件园-首页.url
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
RamSmash/未来软件园-首页.url
Resource
win10v2004-20240802-en
General
- Target RamSmash/未来软件园-首页.url
- Size 271B
- Sample240911-m2e13axbnf
- SHA256 d0d65e31155d61d6bf3620e70b064d36779a754ae53d8bdfb772e892f95dc15a
- MD5 dfce8856238e1f4e787491321478e5d9
- SHA1 fbd1598d996fdc9b3ad5fa0b585562ff9ce5f8f5
- SHA512 26ac37a1d3f133bb5c47f0359b60b70ed6572d1879bac0cdd50138e20ee05d6548cfa165bb3052921c3cb65e902119c951ceec1cb45bcf3e101895a4e2988b61
- MD5 SHA1 SHA512
Malware Config
Signatures
Processes
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\RamSmash\未来软件园-首页.url1⤵PID:2844
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4084,i,12470628711992022444,7767535593390851522,262144 --variations-seed-version --mojo-platform-channel-handle=1028 /prefetch:81⤵PID:2212