Overview
overview
10Static
static
3HA_SendLin...re.exe
windows7-x64
7HA_SendLin...re.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMP/Assi...fy.exe
windows7-x64
8$TEMP/Assi...fy.exe
windows10-2004-x64
8$R0.dll
windows7-x64
8$R0.dll
windows10-2004-x64
8Assist/$R0.dll
windows7-x64
6Assist/$R0.dll
windows10-2004-x64
6$TEMP/DUDU_HH.exe
windows7-x64
10$TEMP/DUDU_HH.exe
windows10-2004-x64
10SendLink.exe
windows7-x64
3SendLink.exe
windows10-2004-x64
3SendLink.url
windows7-x64
6SendLink.url
windows10-2004-x64
3SendLog.html
windows7-x64
3SendLog.html
windows10-2004-x64
3SlideShow.html
windows7-x64
3SlideShow.html
windows10-2004-x64
1Support.url
windows7-x64
5Support.url
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3Analysis
-
max time kernel
129s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
20/09/2024, 03:48
Static task
static1
Behavioral task
behavioral1
Sample
HA_SendLink191_Fire.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
HA_SendLink191_Fire.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Splash.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Splash.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$TEMP/Assist_hanzify.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$TEMP/Assist_hanzify.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$R0.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
$R0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Assist/$R0.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Assist/$R0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$TEMP/DUDU_HH.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
$TEMP/DUDU_HH.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
SendLink.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
SendLink.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
SendLink.url
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
SendLink.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
SendLog.html
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
SendLog.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
SlideShow.html
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
SlideShow.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Support.url
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Support.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
uninst.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
uninst.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
General
-
Target
SlideShow.html
-
Size
4KB
-
MD5
4a1e93b5c2c5edce62fbee0cae44a37d
-
SHA1
aa1032b212501287c62bcbad0a4e0290a639e182
-
SHA256
5d7bb37fe6f93305e973b796ff07a5c32ae2388b86efd4466c49fad71468084b
-
SHA512
52e9cc1628666ba88983292218f1cdf22fa7224cdc8549bdfd05be4fb9649c6ee0bd437d6068c50fe8d80820a756def26b2143f19411d3319fc76e25d8a736ca
-
SSDEEP
96:VvRI7pbCQ/QfwHTRp4IagpGocgrTnc48BP:VpEtcw4ITJzn56
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\SlideShow.html1⤵PID:1924
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=1264,i,11708048364682646792,608099842549576907,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:11⤵PID:2324
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=4068,i,11708048364682646792,608099842549576907,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:11⤵PID:2960
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5436,i,11708048364682646792,608099842549576907,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:11⤵PID:3516
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5596,i,11708048364682646792,608099842549576907,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:81⤵PID:4732
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --field-trial-handle=5616,i,11708048364682646792,608099842549576907,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:81⤵PID:2172
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=6072,i,11708048364682646792,608099842549576907,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:11⤵PID:572
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --field-trial-handle=6044,i,11708048364682646792,608099842549576907,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:81⤵PID:368