Overview
overview
7Static
static
3pingzhu-0....ar.cmd
windows10-2004-x64
7pingzhu-0....ar.cmd
windows11-ltsc_2024-x64
7pingzhu-0....ll.cmd
windows10-2004-x64
3pingzhu-0....ll.cmd
windows11-ltsc_2024-x64
3pingzhu-0....ll.ps1
windows10-2004-x64
3pingzhu-0....ll.ps1
windows11-ltsc_2024-x64
3pingzhu-0....st.exe
windows10-2004-x64
3pingzhu-0....st.exe
windows11-ltsc_2024-x64
3pingzhu-0....me.exe
windows10-2004-x64
3pingzhu-0....me.exe
windows11-ltsc_2024-x64
3pingzhu-0....ol.exe
windows10-2004-x64
3pingzhu-0....ol.exe
windows11-ltsc_2024-x64
3pingzhu-0....st.exe
windows10-2004-x64
3pingzhu-0....st.exe
windows11-ltsc_2024-x64
3pingzhu-0.....2.dll
windows10-2004-x64
7pingzhu-0.....2.dll
windows11-ltsc_2024-x64
7pingzhu-0....st.exe
windows10-2004-x64
3pingzhu-0....st.exe
windows11-ltsc_2024-x64
3pingzhu-0....re.dll
windows10-2004-x64
3pingzhu-0....re.dll
windows11-ltsc_2024-x64
3pingzhu-0....ar.cmd
windows10-2004-x64
5pingzhu-0....ar.cmd
windows11-ltsc_2024-x64
5pingzhu-0....ll.cmd
windows10-2004-x64
3pingzhu-0....ll.cmd
windows11-ltsc_2024-x64
3pingzhu-0....ll.ps1
windows10-2004-x64
3pingzhu-0....ll.ps1
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 16:48
Static task
static1
Behavioral task
behavioral1
Sample
pingzhu-0.10.2-win-x64/install-languagebar.cmd
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
pingzhu-0.10.2-win-x64/install-languagebar.cmd
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
pingzhu-0.10.2-win-x64/install.cmd
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
pingzhu-0.10.2-win-x64/install.cmd
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
pingzhu-0.10.2-win-x64/install.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
pingzhu-0.10.2-win-x64/install.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
pingzhu-0.10.2-win-x64/pingzhu-engine-test.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
pingzhu-0.10.2-win-x64/pingzhu-engine-test.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
pingzhu-0.10.2-win-x64/pingzhu-ime.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
pingzhu-0.10.2-win-x64/pingzhu-ime.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
pingzhu-0.10.2-win-x64/pingzhu-regtool.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
pingzhu-0.10.2-win-x64/pingzhu-regtool.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
pingzhu-0.10.2-win-x64/pingzhu-router-test.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
pingzhu-0.10.2-win-x64/pingzhu-router-test.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
pingzhu-0.10.2-win-x64/pingzhu-tsf-0.10.2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
pingzhu-0.10.2-win-x64/pingzhu-tsf-0.10.2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
pingzhu-0.10.2-win-x64/pingzhu-tsf-test.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
pingzhu-0.10.2-win-x64/pingzhu-tsf-test.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
pingzhu-0.10.2-win-x64/pingzhu_core.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
pingzhu-0.10.2-win-x64/pingzhu_core.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
pingzhu-0.10.2-win-x64/uninstall-languagebar.cmd
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
pingzhu-0.10.2-win-x64/uninstall-languagebar.cmd
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
pingzhu-0.10.2-win-x64/uninstall.cmd
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
pingzhu-0.10.2-win-x64/uninstall.cmd
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
pingzhu-0.10.2-win-x64/uninstall.ps1
Resource
win10v2004-20260911-en
General
- Target pingzhu-0.10.2-win-x64/pingzhu-ime.exe
- Size 88KB
- Sample261030-vbksmazxev
- SHA256 4e7cf81b1242628b39c964f5433975a11a0b2b1efc59b14063d92f1b165c7ffb
- MD5 90126e51a2e75359341b7f21f67111e5
- SHA1 dfa4c973d18c9aa710122ac02b4f30ff48b7dc0d
- SHA512 e587d792c540c971a461f22d5d2e9dcb8a09e0420794b329771dedf8cff82e75d62f12dfb491367918ef913d5ae2dcf2cc3a3afc68ef423e2020b15c50d8898e
- SSDEEP 1536:JZH579M64IA/hkO6vxKzGOeC8LJsLKWe89UuEpDzYi+YoMS:v5RM6s/hkOSx4GOn8tsLX9Uzwcoj
- TLSH T13D932C26CA15517EF26ACA7DCA524C42EB327C4647D1ABCF0B904CE21E6AAD45F3D303
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 2428 pingzhu-ime.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2428 pingzhu-ime.exe 2428 pingzhu-ime.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2428 pingzhu-ime.exe 2428 pingzhu-ime.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2428 pingzhu-ime.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\pingzhu-0.10.2-win-x64\pingzhu-ime.exe"C:\Users\Admin\AppData\Local\Temp\pingzhu-0.10.2-win-x64\pingzhu-ime.exe"1⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2428