Overview
overview
9Static
static
3release/BY...ed.exe
windows10-2004-x64
9release/ki...op.bat
windows10-2004-x64
8release/ki...er.bat
windows10-2004-x64
1ui/AEngine.dll
windows10-2004-x64
3ui/Android...En.exe
windows10-2004-x64
7ui/Start_G_En.bat
windows10-2004-x64
7ui/aow_drv.sys
windows10-2004-x64
1ui/aow_drv_x64.sys
windows10-2004-x64
1ui/aow_drv_x64_ev.sys
windows10-2004-x64
1ui/libaow.dll
windows10-2004-x64
5ui/libx264-148.dll
windows10-2004-x64
3ui/plugins...ce.dll
windows10-2004-x64
3ui/plugins...er.exe
windows10-2004-x64
7ui/plugins/TSSCom.dll
windows10-2004-x64
3ui/plugins/TStats.dll
windows10-2004-x64
3ui/plugins...ll.dll
windows10-2004-x64
3ui/plugins...86.dll
windows10-2004-x64
3ui/plugins...32.exe
windows10-2004-x64
7ui/plugins...ce.dll
windows10-2004-x64
3ui/plugins...ce.dll
windows10-2004-x64
3ui/plugins...er.exe
windows10-2004-x64
3ui/plugins...om.dll
windows10-2004-x64
3ui/plugins...86.dll
windows10-2004-x64
3ui/plugins...32.exe
windows10-2004-x64
7ui/plugins...ce.dll
windows10-2004-x64
3ui/tx_lsp/...sp.dll
windows10-2004-x64
3ui/tx_lsp/...p4.dll
windows10-2004-x64
3ui/tx_lsp/...in.dll
windows10-2004-x64
3Analysis
-
max time kernel
131s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/10/2024, 09:52
Static task
static1
Behavioral task
behavioral1
Sample
release/BYPASS_protected.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
release/kill_Gameloop.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
release/kill_browser.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
ui/AEngine.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
ui/AndroidEmulatorEn.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
ui/Start_G_En.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
ui/aow_drv.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
ui/aow_drv_x64.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
ui/aow_drv_x64_ev.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
ui/libaow.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
ui/libx264-148.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
ui/plugins/GameService.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
ui/plugins/TP3Helper.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
ui/plugins/TSSCom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
ui/plugins/TStats.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
ui/plugins/TesMonDrvDll.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
ui/plugins/UniSecDistDll_x86.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
ui/plugins/Updater32.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
ui/plugins/ace-trace.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
ui/pluginsen/GameService.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
ui/pluginsen/TP3Helper.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
ui/pluginsen/TSSCom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
ui/pluginsen/UniSecDistDll_x86.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
ui/pluginsen/Updater32.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
ui/pluginsen/ace-trace.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
ui/tx_lsp/QMProxyAccLsp.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
ui/tx_lsp/QMProxyAccLsp4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
ui/tx_lsp/TGBAssistPlugin.dll
Resource
win10v2004-20240802-en
General
-
Target
ui/aow_drv_x64.sys
-
Size
1.3MB
-
MD5
4d72255396e25ea7f4a8d371a2d67ef2
-
SHA1
5504c08f11fe433b3ea9e34a5533ffb8c00d3d75
-
SHA256
f66727a794846f49a1b93faa7a1293a8a0cc22d328775bce9f56bd6da24e28cb
-
SHA512
7beaa86290a63dc4e88282885bf1afeb9ea200774f81ce1c2bbbb71f241c3f870394f2ff3b4b2cff68665806689660f4524b6c2d334fb8df8f622ed49b161089
-
SSDEEP
12288:xgVTpaToyb7baUw7v191/ipifvo1o5jJHI9k5uZ0FU7EPno7g5vvC3uEm1AzfMS:voyzhAd91/ipmIgU7EPo7gRvCU1YfMS
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ui\aow_drv_x64.sys1⤵PID:4568
-
C:\Users\Admin\AppData\Local\Temp\ui\aow_drv_x64.sysC:\Users\Admin\AppData\Local\Temp\ui\aow_drv_x64.sys2⤵PID:1740
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4072,i,1828333185976713750,7918646547767660928,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:81⤵PID:3956