Overview
overview
5Static
static
3AutoUpdate.exe
windows7-x64
3AutoUpdate.exe
windows10-2004-x64
3ExcelPlus.exe
windows7-x64
5ExcelPlus.exe
windows10-2004-x64
5Export.dll
windows7-x64
1Export.dll
windows10-2004-x64
1FlexCell.dll
windows7-x64
1FlexCell.dll
windows10-2004-x64
1Ionic.Zip.dll
windows7-x64
1Ionic.Zip.dll
windows10-2004-x64
1Templates/...��.url
windows7-x64
1Templates/...��.url
windows10-2004-x64
1help.chm
windows7-x64
1help.chm
windows10-2004-x64
1通用商�...��.xls
windows7-x64
3通用商�...��.xls
windows10-2004-x64
1Analysis
-
max time kernel
124s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
12/09/2024, 16:28
Static task
static1
Behavioral task
behavioral1
Sample
AutoUpdate.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
AutoUpdate.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
ExcelPlus.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
ExcelPlus.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Export.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Export.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
FlexCell.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
FlexCell.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Ionic.Zip.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Ionic.Zip.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Templates/新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Templates/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
help.chm
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
help.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
通用商品条形码目录.xls
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
通用商品条形码目录.xls
Resource
win10v2004-20240802-en
General
-
Target
Ionic.Zip.dll
-
Size
435KB
-
MD5
746f909970274c71991f63325ba3ab4e
-
SHA1
cdc53cd41c8ce8d356b057a3ece483f9116fdda9
-
SHA256
5c0449b8a9b65f36cb6a66c1ac9379f8f62a75dfccfda67fe959563177b3c5b0
-
SHA512
5552710ec9c648385e72ec650f437a99c28116c69198dd94268ac5308f1d7fc279c6cd7f563ae7eb5b1f0d0bc29e83104ea4404a7401a644f3e29ac471cab2b5
-
SSDEEP
6144:jrQweBeGtSV41QJDsTDDTXamJ0Zu3xLV/m9suGOKtM3:jgBlS4YsbXalu3fm9vGZM
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Ionic.Zip.dll,#11⤵PID:4804
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1040,i,10065386245627775856,6567048529106473151,262144 --variations-seed-version --mojo-platform-channel-handle=4004 /prefetch:81⤵PID:3620