Overview
overview
8Static
static
3CrackCaptchaAPI.dll
windows7-x64
3CrackCaptchaAPI.dll
windows10-2004-x64
3CrackCaptc...nt.dll
windows7-x64
6CrackCaptc...nt.dll
windows10-2004-x64
6FastVerCode.dll
windows7-x64
8FastVerCode.dll
windows10-2004-x64
3UUWisehelper.dll
windows7-x64
3UUWisehelper.dll
windows10-2004-x64
3dc.dll
windows7-x64
8dc.dll
windows10-2004-x64
8haoapi.dll
windows7-x64
3haoapi.dll
windows10-2004-x64
3windows200...��.bat
windows7-x64
1windows200...��.bat
windows10-2004-x64
1注册答�...��.bat
windows7-x64
1注册答�...��.bat
windows10-2004-x64
1腾讯QQ�...��.exe
windows7-x64
5腾讯QQ�...��.exe
windows10-2004-x64
3Analysis
-
max time kernel
135s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
31/10/2024, 15:29
Static task
static1
Behavioral task
behavioral1
Sample
CrackCaptchaAPI.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
CrackCaptchaAPI.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
CrackCaptchaClient.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
CrackCaptchaClient.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
FastVerCode.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
FastVerCode.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
UUWisehelper.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
UUWisehelper.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
dc.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
dc.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
haoapi.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
haoapi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
windows2008 补丁.bat
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
windows2008 补丁.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
注册答题系统.bat
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
注册答题系统.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
腾讯QQ资料查询管理.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
腾讯QQ资料查询管理.exe
Resource
win10v2004-20241007-en
General
-
Target
windows2008 补丁.bat
-
Size
21B
-
MD5
c1fcdd87c914046187b9ca4e4cc77959
-
SHA1
89729560cc2d0a7b0360999d27f8718eaeb3f5cf
-
SHA256
aaed3d05c5f0e1d38eacf31f016431244392ed3b42b91ad12022c57d53769607
-
SHA512
fa9a875082388b3175b6ce3ffe7ec0f0239d37136def7de242e5b6160a69047ca7902742894d73652684485cc5fc77d18b09846961a4895e04acbaa00b14b9cd
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 2864 wrote to memory of 4540 2864 cmd.exe 85 PID 2864 wrote to memory of 4540 2864 cmd.exe 85