Overview
overview
10Static
static
10客户端(...EY.exe
windows7-x64
9客户端(...EY.exe
windows10-2004-x64
906432
ubuntu-22.04-amd64
71.html
windows7-x64
31.html
windows10-2004-x64
3518_2.exe
windows7-x64
4518_2.exe
windows10-2004-x64
4520.exe
windows7-x64
4520.exe
windows10-2004-x64
410711.exe
windows7-x64
310711.exe
windows10-2004-x64
3711.exe
windows7-x64
7711.exe
windows10-2004-x64
7TSmm
ubuntu-24.04-amd64
7Drkv
ubuntu-22.04-amd64
10FCK_RSC.dll
windows7-x64
3FCK_RSC.dll
windows10-2004-x64
3FUCK360.exe
windows7-x64
7FUCK360.exe
windows10-2004-x64
10GetPass.exe
windows7-x64
3GetPass.exe
windows10-2004-x64
3HkMh.exe
windows7-x64
10HkMh.exe
windows10-2004-x64
10HkMh_2.exe
windows7-x64
7HkMh_2.exe
windows10-2004-x64
10HkMh_3.exe
windows7-x64
10HkMh_3.exe
windows10-2004-x64
10Killbash.x
ubuntu-24.04-amd64
3服务器(...r).exe
windows7-x64
6服务器(...r).exe
windows10-2004-x64
6ShellCodeDec.exe
windows7-x64
ShellCodeDec.exe
windows10-2004-x64
Analysis
-
max time kernel
149s -
max time network
153s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
08-12-2024 01:12
Behavioral task
behavioral1
Sample
客户端(Client)_KEY.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
客户端(Client)_KEY.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
06432
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral4
Sample
1.html
Resource
win7-20240903-en
Behavioral task
behavioral5
Sample
1.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
518_2.exe
Resource
win7-20240729-en
Behavioral task
behavioral7
Sample
518_2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
520.exe
Resource
win7-20241010-en
Behavioral task
behavioral9
Sample
520.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
10711.exe
Resource
win7-20240903-en
Behavioral task
behavioral11
Sample
10711.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
711.exe
Resource
win7-20240708-en
Behavioral task
behavioral13
Sample
711.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
TSmm
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral15
Sample
Drkv
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral16
Sample
FCK_RSC.dll
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
FCK_RSC.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
FUCK360.exe
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
FUCK360.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
GetPass.exe
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
GetPass.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
HkMh.exe
Resource
win7-20241010-en
Behavioral task
behavioral23
Sample
HkMh.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
HkMh_2.exe
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
HkMh_2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
HkMh_3.exe
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
HkMh_3.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
Killbash.x
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral29
Sample
服务器(Server)/服务器(Server).exe
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
服务器(Server)/服务器(Server).exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
ShellCodeDec.exe
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
ShellCodeDec.exe
Resource
win10v2004-20241007-en
General
-
Target
TSmm
-
Size
1.5MB
-
MD5
c2e14a973f432b9488fdb0535c019797
-
SHA1
322fa15337433e93e6138bf72c3d47d4b95f1366
-
SHA256
df0506cdecf09a8879920a133ef2f9d215bb858a0f8c9131838607036a5479e9
-
SHA512
bb4cbcc02c9c16d64523f17c1e2cb61c9aac7817722758e57ee0cbfc5d28e975464b08a2ff12ae10015c050fc29f1323aea853a7e1a87483f3dd295074f89c24
-
SSDEEP
24576:hNJp/2SkgT4KUAopmhDO2Aan9XgnU6tZAf4Nzbm6g+qF2SdYOrhGg+bL+cH8y6LL:hNvOx/Vp/2bn9XgnNtmf28rhLbccIwhL
Malware Config
Signatures
-
pid Process 2821 TSmm