Overview
overview
3Static
static
3client/CadIO.dll
windows10-2004-x64
3client/CadIO.dll
windows11-ltsc_2024-x64
3client/Lab...mm.ps1
windows10-2004-x64
3client/Lab...mm.ps1
windows11-ltsc_2024-x64
3client/cms.exe
windows10-2004-x64
3client/cms.exe
windows11-ltsc_2024-x64
3client/cximage.dll
windows10-2004-x64
3client/cximage.dll
windows11-ltsc_2024-x64
3client/html/js/all.js
windows10-2004-x64
3client/html/js/all.js
windows11-ltsc_2024-x64
3client/htm...min.js
windows10-2004-x64
3client/htm...min.js
windows11-ltsc_2024-x64
3client/htm...ml5.js
windows10-2004-x64
3client/htm...ml5.js
windows11-ltsc_2024-x64
3client/htm...8.2.js
windows10-2004-x64
3client/htm...8.2.js
windows11-ltsc_2024-x64
3client/htm...min.js
windows10-2004-x64
3client/htm...min.js
windows11-ltsc_2024-x64
3client/htm...ce.htm
windows10-2004-x64
3client/htm...ce.htm
windows11-ltsc_2024-x64
3client/htm...t.html
windows10-2004-x64
3client/htm...t.html
windows11-ltsc_2024-x64
3client/htm...s.html
windows10-2004-x64
3client/htm...s.html
windows11-ltsc_2024-x64
3client/htm...3.html
windows10-2004-x64
3client/htm...3.html
windows11-ltsc_2024-x64
3client/htm...�.html
windows10-2004-x64
3client/htm...�.html
windows11-ltsc_2024-x64
3client/htm...�.html
windows10-2004-x64
3client/htm...�.html
windows11-ltsc_2024-x64
3client/htm...�.html
windows10-2004-x64
3client/htm...�.html
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/09/2026, 15:19
Behavioral task
behavioral1
Sample
client/CadIO.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
client/CadIO.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
client/Label/资产标签-80x50mm.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
client/Label/资产标签-80x50mm.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
client/cms.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
client/cms.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
client/cximage.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
client/cximage.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
client/html/js/all.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
client/html/js/all.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
client/html/js/echarts.min.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
client/html/js/echarts.min.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
client/html/js/html5.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
client/html/js/html5.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
client/html/js/jQuery1.8.2.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
client/html/js/jQuery1.8.2.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
client/html/js/prefixfree.min.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
client/html/js/prefixfree.min.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
client/html/notice/po_notice.htm
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
client/html/notice/po_notice.htm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
client/html/site/t_ent.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
client/html/site/t_ent.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
client/html/site/t_ent_goods.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
client/html/site/t_ent_goods.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
client/html/site/t_ent_top3.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
client/html/site/t_ent_top3.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
client/html/templ/BOM二维码标签.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
client/html/templ/BOM二维码标签.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
client/html/templ/客户标签.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
client/html/templ/客户标签.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
client/html/templ/普通条码标签.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
client/html/templ/普通条码标签.html
Resource
win11ltsc2024-20260709-en
General
- Target client/cms.exe
- Size 8.0MB
- Sample260907-sp7hfazarc
- SHA256 88024b571105bf03fc252035a297154303072cc31b6cc39c88cf2d8f44b8dc9c
- MD5 336630cf56d89bf40d6a7afb57e00f9f
- SHA1 47ecf17bcd77cf2265d8aeda740d806a2032166e
- SHA512 7b99a7e32405fa60f05a2bba4004d8ed02cc28afa275618080f575cbd8af10efd3ccf2cb65c222c59f7f74622ff96aa7a8f2940708d4400ccc169228274539e2
- SSDEEP 98304:Vvkg1YDoAKpjnCT1TmPylSMMt01Hor1d9VzDUmFlGeEfAsl4zKERRlO:hkgYotVaaqb1Ir1Vl+uR
- TLSH T103866B01BA13C491CED91430046A677B47F8BDA74730AFAB9B68FC395937282BCB651D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cms.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4304 cms.exe 4304 cms.exe 4304 cms.exe