Overview
overview
7Static
static
76289_v.2.6.1.zip
windows7-x64
46289_v.2.6.1.zip
windows10-2004-x64
1植物大�...aw.dll
windows7-x64
7植物大�...aw.dll
windows10-2004-x64
7植物大�...ne.dll
windows7-x64
3植物大�...ne.dll
windows10-2004-x64
3植物大�...3d.dll
windows7-x64
7植物大�...3d.dll
windows10-2004-x64
7植物大�...��.txt
windows7-x64
1植物大�...��.txt
windows10-2004-x64
1植物大�...mm.dll
windows7-x64
3植物大�...mm.dll
windows10-2004-x64
3植物大�...aw.dll
windows7-x64
3植物大�...aw.dll
windows10-2004-x64
3植物大�...o.conf
windows7-x64
3植物大�...o.conf
windows10-2004-x64
3植物大�...��.txt
windows7-x64
1植物大�...��.txt
windows10-2004-x64
1植物大�...mm.dll
windows7-x64
3植物大�...mm.dll
windows10-2004-x64
3植物大�...aw.dll
windows7-x64
3植物大�...aw.dll
windows10-2004-x64
3植物大�...o.conf
windows7-x64
3植物大�...o.conf
windows10-2004-x64
3植物大�...��.txt
windows7-x64
1植物大�...��.txt
windows10-2004-x64
1植物大�...��.txt
windows7-x64
1植物大�...��.txt
windows10-2004-x64
1植物大�...��.hta
windows7-x64
3植物大�...��.hta
windows10-2004-x64
3植物大�...��.pdf
windows7-x64
3植物大�...��.pdf
windows10-2004-x64
3Analysis
- max time kernel
119s - max time network
125s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
09/11/2024, 04:29
Behavioral task
behavioral1
Sample
6289_v.2.6.1.zip
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
6289_v.2.6.1.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/ddraw.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral4
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/ddraw.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/libwine.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/libwine.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/wined3d.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/wined3d.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/使用说明.txt
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral10
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/使用说明.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/D3DImm.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral12
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/D3DImm.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/DDraw.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral14
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/DDraw.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/dgVoodoo.conf
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral16
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/dgVoodoo.conf
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/使用说明.txt
Resource
win7-20241023-en
windows7-x64
Behavioral task
behavioral18
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/使用说明.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/D3DImm.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/D3DImm.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/DDraw.dll
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral22
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/DDraw.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/dgVoodoo.conf
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral24
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/dgVoodoo.conf
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/使用说明.txt
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/使用说明.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
植物大战僵尸杂交版v2.6.1/【不懂就看】文件用途说明.txt
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral28
Sample
植物大战僵尸杂交版v2.6.1/【不懂就看】文件用途说明.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
植物大战僵尸杂交版v2.6.1/【双击打开】存档与游戏文件夹.hta
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral30
Sample
植物大战僵尸杂交版v2.6.1/【双击打开】存档与游戏文件夹.hta
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
植物大战僵尸杂交版v2.6.1/【常见问题】杂交版指南.pdf
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
植物大战僵尸杂交版v2.6.1/【常见问题】杂交版指南.pdf
Resource
win10v2004-20241007-en
windows10-2004-x64
General
- Target 6289_v.2.6.1.zip
- Size 107.8MB
- Sample241109-e4dl1sxjbx
- SHA256 9b5b6d43994986218f138e5d9cfd824ebeb594f44cbdf6733cc63d0933bddc08
- MD5 2e44c4beeaa19b7a8cd5f6db35c86360
- SHA1 0a7ec5aec4ded89cadf3853481ea08856770afc4
- SHA512 8f8a45e2d55f730813548e98b64729f77a2d2e95bcbe9dd14d39be08103bcde3a19693faa7b9811d0935f3defb430f9438ff18020a6845acb2953c3afa971c10
- SSDEEP 1572864:goAwwvEvpkKJFOwlMJXbeFVKsTi0kPXuGhjs4fb2efBPtMV92K6LPk+FMjXAMZ:5USTLOuMJKGwkGGhz6M1Ml6LPVej5
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification \??\c:\windows\installer\{ac76ba86-7ad7-1033-7b44-a90000000001}\pdffile_8.ico 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 340 7zFM.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 340 7zFM.exe Token: 35 340 7zFM.exe Token: SeSecurityPrivilege 340 7zFM.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 340 7zFM.exe 340 7zFM.exe 340 7zFM.exe