Overview

overview

8

Static

static

5

Genshin-HK...HK.exe

windows10-2004-x64

8

Genshin-HK...HK.exe

windows11-ltsc_2024-x64

8

Genshin-HK...rl.dll

windows10-2004-x64

8

Genshin-HK...rl.dll

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Genshin-HK.zip
  • Size 3.5MB
  • Sample261107-xftx7set9s
  • SHA256 e881f4e8009c7ee89c40dcbf2c79c0213d8a3f9079f88d623907296c2be616c2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
executionpersistence

Malware Config

Targets

    • Target
      Genshin-HK/Genshin-HK.exe
    • Size 785KB
    • SHA256 eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution
    behavioral1behavioral2
    • Target
      Genshin-HK/libcurl.dll
    • Size 10.1MB
    • SHA256 a30318eb95b7ade8089929b70021c385340de3f1c6795175366dcaa2f733ea6d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    executionpersistence

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks