Overview
overview
5Static
static
3通关新/haoi.dll
windows7-x64
3通关新/haoi.dll
windows10-2004-x64
3通关新/qs.dll
windows7-x64
3通关新/qs.dll
windows10-2004-x64
3通关新/...er.exe
windows7-x64
1通关新/...er.exe
windows10-2004-x64
1通关新/...3f.exe
windows7-x64
1通关新/...3f.exe
windows10-2004-x64
1通关新/....6.exe
windows7-x64
5通关新/....6.exe
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19/11/2024, 17:58
Static task
static1
Behavioral task
behavioral1
Sample
通关新/haoi.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
通关新/haoi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
通关新/qs.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
通关新/qs.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
通关新/系统配置/ProcessHider.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
通关新/系统配置/ProcessHider.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
通关新/系统配置/f2f3f.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
通关新/系统配置/f2f3f.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
通关新/通关2.6.exe
Resource
win7-20241023-en
Behavioral task
behavioral10
Sample
通关新/通关2.6.exe
Resource
win10v2004-20241007-en
General
-
Target
通关新/系统配置/f2f3f.exe
-
Size
117KB
-
MD5
88aae879bc06c0d12973cbc23cfb33ef
-
SHA1
1d5312d43ae6df5da9d8dbaf7ef1901008482c80
-
SHA256
e0f62f22199bb5168b70b72b944f37d8367f33df4504ba8eb4a308fe54b30872
-
SHA512
f7f9aab1f27777bfe1f9cd75a5317714b701955182a81ece0e1cdd3344c2d4eb34d7a27ebb7864d71a2e97424c1d458d950d52e9c11c3380af55820c995ab0f4
-
SSDEEP
1536:ck/jSUVjwswSc8WX4q1GlvThB5RTJUl1nGDa9xrB49+VpCkBijn2:R+Eg4q1GJThB5RTJUl1Tjm9+VpRkjn
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2348 f2f3f.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2348 f2f3f.exe 2348 f2f3f.exe 2348 f2f3f.exe 2348 f2f3f.exe 2348 f2f3f.exe 2348 f2f3f.exe