Overview
overview
7Static
static
7AdbWinApi.dll
windows10-2004-x64
3AdbWinApi.dll
windows11-ltsc_2024-x64
3AdbWinUsbApi.dll
windows10-2004-x64
3AdbWinUsbApi.dll
windows11-ltsc_2024-x64
3Nhook.dll
windows10-2004-x64
5Nhook.dll
windows11-ltsc_2024-x64
5adb.exe
windows10-2004-x64
3adb.exe
windows11-ltsc_2024-x64
3eb/办公.dll
windows10-2004-x64
3eb/办公.dll
windows11-ltsc_2024-x64
3eb/常用.dll
windows10-2004-x64
3eb/常用.dll
windows11-ltsc_2024-x64
3eb/拦截.dll
windows10-2004-x64
3eb/拦截.dll
windows11-ltsc_2024-x64
3scrcpy-win...pi.dll
windows10-2004-x64
3scrcpy-win...pi.dll
windows11-ltsc_2024-x64
3scrcpy-win...pi.dll
windows10-2004-x64
3scrcpy-win...pi.dll
windows11-ltsc_2024-x64
3scrcpy-win...L2.dll
windows10-2004-x64
3scrcpy-win...L2.dll
windows11-ltsc_2024-x64
3scrcpy-win...db.exe
windows10-2004-x64
3scrcpy-win...db.exe
windows11-ltsc_2024-x64
3scrcpy-win...61.dll
windows10-2004-x64
3scrcpy-win...61.dll
windows11-ltsc_2024-x64
3scrcpy-win...61.dll
windows10-2004-x64
3scrcpy-win...61.dll
windows11-ltsc_2024-x64
3scrcpy-win...59.dll
windows10-2004-x64
3scrcpy-win...59.dll
windows11-ltsc_2024-x64
3scrcpy-win....0.dll
windows10-2004-x64
3scrcpy-win....0.dll
windows11-ltsc_2024-x64
3scrcpy-win...re.bat
windows10-2004-x64
3scrcpy-win...re.bat
windows11-ltsc_2024-x64
3General
- Target xiaojiaoben-4.86.zip
- Size 17.1MB
- Sample261113-xmfddsft8v
- SHA256 860952e784c283daa5e6f0b24d22d8cc46fabfbccd3d64272db26af6a5f8c2cd
- MD5 93cdb8fd0fc72672f0c3a7549af1cb88
- SHA1 75ac315d28b2f139af0333e1048de0d3407b9819
- SHA512 b56f8ff81d478b5446ffe9e12cb7cb9442ddd093ad97f8ed68d5fba54fb60bcea2a3493cfda3822837c8356740e6ced090266b1bda98c7ab1303d5dbd8010709
- SSDEEP 393216:mF8v1NjaY2fUJdKExPqxxrARr54jsDjn6roPfwqpMCAJg:mFGjA8EExP2rAxW2o5CT
- TLSH T19A07333AA673A789FE1A07F704BB39C2C9CE8301C995D4570D7761D6C81BA142A1EDCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AdbWinApi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
AdbWinApi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
AdbWinUsbApi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
AdbWinUsbApi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Nhook.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Nhook.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
adb.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
adb.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
eb/办公.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
eb/办公.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
eb/常用.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
eb/常用.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
eb/拦截.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
eb/拦截.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
scrcpy-win32-v2.7/AdbWinApi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
scrcpy-win32-v2.7/AdbWinApi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
scrcpy-win32-v2.7/AdbWinUsbApi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
scrcpy-win32-v2.7/AdbWinUsbApi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
scrcpy-win32-v2.7/SDL2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
scrcpy-win32-v2.7/SDL2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
scrcpy-win32-v2.7/adb.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
scrcpy-win32-v2.7/adb.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
scrcpy-win32-v2.7/avcodec-61.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
scrcpy-win32-v2.7/avcodec-61.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
scrcpy-win32-v2.7/avformat-61.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
scrcpy-win32-v2.7/avformat-61.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
scrcpy-win32-v2.7/avutil-59.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
scrcpy-win32-v2.7/avutil-59.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
scrcpy-win32-v2.7/libusb-1.0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
scrcpy-win32-v2.7/libusb-1.0.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
scrcpy-win32-v2.7/open_a_terminal_here.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
scrcpy-win32-v2.7/open_a_terminal_here.bat
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target AdbWinApi.dll
- Size 105KB
- SHA256 db92f418f6c384faeebccadbc592fb339af3d51ecfec3ec04bd3572080247bae
- MD5 d2c034449be65653aec2459d9ab83ae5
- SHA1 6127adb5894a7b99293fd49c25ea5ac2710d0c4c
- SHA512 9294fbabaeb6f4907500aa5639b45cece492b78db79069fa950fd1020d08f1a5372b5153495da8d662b5a1509501685741add1bfea3b8a43343f9960fae73f78
- SSDEEP 1536:wwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCP17HxEyB:wwqD3L8Tezq0et+ui1y6L
- TLSH T1A9B36A227891C072C8D761B91AECF76593BEF5A10B7589C3339803DACE643C25B7529B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target AdbWinUsbApi.dll
- Size 71KB
- SHA256 3ba13420d47c60d958e0d5b333440f9895704879bb7c983b55f195717f621a3e
- MD5 93a6075b7ae7d0df52ec55017a2f8214
- SHA1 af6729c67f09f27440a2354cf7a41db5defb70a5
- SHA512 c4b17a54edf4aa75a2456a3d3b647fc28016fdbc98cda725cc34e0f631f3d357c9abac9f7d089137401ddeefac7af0fd353aca3b89777093c1fcb55dca8de3eb
- SSDEEP 1536:J72doFmOiHizFbPlspcsbj5ZsP+YeTs1px7HxEw:JSSfN9+YeTs1px
- TLSH T12A636C227990C432CC9651B819ECE621A67FBA511BB1C4C3779D43DBDE203C1ABB9397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Nhook.dll
- Size 54KB
- SHA256 a704e0cefd6e42313b10ce353f9c2b1644513121bc3763ef3cdc0286b0cddfd6
- MD5 5fac56d8aec6e3b62685c51a7cb597d2
- SHA1 ec9308d5f7776d32575baac8058b461926697e9b
- SHA512 719c9774f0dec107fc7a78ff71165edb361a72dd280e7874699ae5b4c9d91cc0cfc3526238173b2c67e50a933299a7d693d09369f3f9e2c05c3df46bf2e644b2
- SSDEEP 1536:oAolZsp8ALwNmCM14jUPNZPn9CBnouy8:Wl2pNLw2GUPNZPn9Chout
- TLSH T1B443010BE2498CB4C65D487803D271566C988B0DCAC7B4DABEC8A06BFD757607D36593
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target adb.exe
- Size 5.7MB
- SHA256 0e606318957baac81b997ccd8ee4bcdff79964a9921da07c716aea3e8d856af7
- MD5 ae6975e7c2211152f5fa54a1fddf414d
- SHA1 928aac595aa43dfcf540e7b03f747b4c3bdf574e
- SHA512 1d84c25b228268bdb620098a01054e010f2afd007822497ae81057c4c73d887e62adc5edd9461ae5795f954909435935aa41f223de3a9a6969c5f31cb4e9462c
- SSDEEP 98304:Xk1cPO5m7ufbUgcuNd3FIicIGNhk56NW:XMFhbFhFPcIGLk5
- TLSH T18D569E86F693A1B8DA4315B0612EB23FBF340704C718CDF7C6E4DD74A472A91293B669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target eb/办公.dll
- Size 236KB
- SHA256 f138dd97c6ea07d0e987c387cb165f0c9e681c84d63f4da02cb88647509290a8
- MD5 69e75f3d758d11dc52dc6eb27e107aba
- SHA1 952bef7f961e110468ac719d8d8878e5d0f6116f
- SHA512 382277a9069a4fdc94761e994fd55ec8fbc6a4a84580550659761da808a9f49d0729430fc80b39362b8d7b0a40345f4d45481bf94ae44a1bebf87d39a467a019
- SSDEEP 3072:kU0mR47ZwbgCX2IsQv8gziCj7lZr3/j9BZCtRVQ5HCLP:kiR8wbHX2VtJCXlZIVQ5HC
- TLSH T13E34F91399524865D24A26320CCB4F778ABE93751B73A703EB508DFE7F69A710D0B60E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target eb/常用.dll
- Size 1.1MB
- SHA256 7dfc29609f0491a7aafea84f8918262151c0a20ec5ce6e7ee9a1c2af8043fa57
- MD5 a03fbe19cb85585de6840bd86b2df78b
- SHA1 c8fb93e74e9455bf83b1632726a62c4656d2fe8f
- SHA512 f204a2cb26fb9fc0ea3304089db5ba44f49c940c4a7f58db5e236a7bd944f31310faa80a30c0a746ede6c1b717f4a3c3961a3ca4cd5305ad163f90024eb8a86e
- SSDEEP 24576:rYJZu/TzuF5i/sMBLG625BA294ZB8df/RtKCYUXwcP:rIZFoLJGm295/RtKCkcP
- TLSH T12B459E13B28180F1D11D2BB429B7273AAEB95B570D30CA83DB94EEF95D32552E72710E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target eb/拦截.dll
- Size 760KB
- SHA256 9cae86b135d415ab37961c12e17b0e3a7da4b681b7629b37f45196f27104c7eb
- MD5 8c21c34ccd845f8055b5ab815ef1cfd6
- SHA1 edd69ec7ff69e0275591251e1dfaea03535fbd97
- SHA512 acd16bfda213f2fa05cfd6214cedfa8de52d56878773ed04fa11bccbcabdd60dad48e1c52d59a3f16509602843b81c312be80eb1855cf32187c37a89d81fa93a
- SSDEEP 12288:5yX3J0u8zDkzbOHcGDm02ujrRZf3LqsG9eN01GRtwqokxWptBUg:snmuDzgD2u3RZTqU01GrwdkA9Ug
- TLSH T1FEF4BE5974F3B9DAF15D3331E8BC97EE12AF7122371A8FF5E8432AA8451CFA42552900
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/AdbWinApi.dll
- Size 105KB
- SHA256 1ad523231de449af3ba0e8664d3af332f0c5cc4f09141691ca05e35368fa811a
- MD5 d79a7c0a425f768fc9f9bcf2aa144d8f
- SHA1 3da9e4c4566bd6d4efeeaf7ceab9e9e83f2f67e5
- SHA512 ff650b98ecc55df6c2cb1b22221b1e71d63c01324f8a8b0f05f1497f5416131f7c33ef2ea17ed323cb2bfdbe7ae1824474544434899d2cb89e9c8c00db7dbb15
- SSDEEP 1536:qwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCPo7n8xcL:qwqD3L8Tezq0et+ui1yJv
- TLSH T1A2B36A327891C072C8D761B919ECF76593BEF5A10B6489C3339803DACE653C26B7529B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/AdbWinUsbApi.dll
- Size 71KB
- SHA256 51a61758a6f1f13dd36530199c0d65e227cd9d43765372b2942944cc3296ca2c
- MD5 e6e1716f53624aff7dbce5891334669a
- SHA1 9c17f50ba4c8e5db9c1118d164995379f8d686fb
- SHA512 c47392b6f7d701e78f78e0b0ddce5508ab8d247a4095391e77cd665e955f4938e412ffcb6076534dcad287af4f78d84668496935e71b9bb46a98401522815eb9
- SSDEEP 1536:o72doFmOiHizFbPlspcsbj5ZsP+YeTs1pN7lLx:oSSfN9+YeTs1pNR
- TLSH T1CB736C227991C472CC9651B818ECE621A57FBA511BB084C3779D43EBDE203C1BBB9397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/SDL2.dll
- Size 1.8MB
- SHA256 24e6c8a05dec0b569619bebfdf29fd00e2e7f57c8b3ab207c60d20c02453d525
- MD5 5da9da5d6288221966d71532bc4f7114
- SHA1 46350ce0a35e9b052f1518b6247299d779251dc5
- SHA512 c1efa5f727e302645c7077bdc62f9193884c2bc1be05214a3d78175d560b511a9b5a2bb8f2758cac6971141805e2369aeab467a8754696b3a295593c33e6a025
- SSDEEP 24576:glhxYSSYM9KjrgUNrgqOnZtEq7BAwLhVk+7tmRUJUQoRXS+Kf15pZFUgnz83dM45:glmYYKjvCoJSVnz83dMyN
- TLSH T167954888FB8354F9EE1745B2CACBF3BF4A2576054455DAB1FF8C1A8AF832722150921D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/adb.exe
- Size 5.6MB
- SHA256 997324a38d89e3b282306bf25ccaa167c49a35850ac0ab4a169e7a15afa82fc8
- MD5 64daf7cca61d468d26a407d79a7c26a9
- SHA1 51b451089e73c9a03e2f24ab2fc81896d48c6126
- SHA512 5a7bd06326e8ee868a2e6c724bc74bd290acaa00f3442807d3f69489a374a13a3cb41fbaf929c79525bdac319bd9a64ecfaf3cbdb6585ae332a485e911d8370d
- SSDEEP 49152:6F94iUyeKyel8LmardznR2u55qCcWa/MXwxBikLW6x2GnS06d5Ja1ekmBfDnGZLK:wbd0ZZTz7aEoFad5J/GVHt+3h
- TLSH T1D9468D85FA93A1B8DE431470202FB23FAF344704CB14CEF7D7E4DE756862992293A659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/avcodec-61.dll
- Size 2.9MB
- SHA256 be1031d81678ebc1dcaf6553692e9815b64996357089db88234cdcea3aed2924
- MD5 ede07e01da40fc8fdff797b610de6286
- SHA1 6127308889f876bb8d425d164a65606205007918
- SHA512 b454bf0ff8a1ba7a99bfb9a410de966f5bbd58086348b640a7cbfbf1f818b8e185cd89b48cfcc51a098731bf46da2800e07907829ccf8d05dc234468f645c91d
- SSDEEP 49152:8ay3W/D2eujMkgEms2fArsZMbvOaHyTHvXXeJMLy3l+qoVAv0lTbBHUn+xoO+6J7:1ym/D2fnFmqvOQMvXXeJMLy3l+9AMllF
- TLSH T19FD57B85FAC762E9E9178CB1514BF33F96685B02C024EE71EF8C2B5AF873B12541B245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/avformat-61.dll
- Size 689KB
- SHA256 a524bd257f07fbe3cbf7598d5683654031df9df369908a413ea684f66e609e4a
- MD5 33fddde9f35484339318a7b9fd288a81
- SHA1 d9d3fd6c2f61c167355c5b06b5ff0590df8396a8
- SHA512 be2a28298fed63786189629d941f83839612c3401c01e6953dd97a45712f2363277ebe092443760dd82165c0fe1b4bd06f7acc9151391f64ab2b6831b0948a35
- SSDEEP 12288:JrMUW4F35hZrrGE3q29v+AbYCwbIzkTDVu0ggF4vzXSpC0iMgNNNNNNNNNNNNNN1:GUW4F3JGE620A7wbIzkNFgguzXXNNNNl
- TLSH T1C8E42A94EA8B60F5EE5B4971558BF77F47305702C430EEF5EF0C2A46FA33A22141A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/avutil-59.dll
- Size 921KB
- SHA256 4ea9171f52885277300509433a229069b52193b76a0860909c0ef3e1affd396a
- MD5 0aaf947bbf384ad6e4df00160772e211
- SHA1 bb21907d5a51df7c962767eea88686c99cdd4ce3
- SHA512 c972d34edc17e2022a1e1ea3a1cb16f8e4094eed1413052c6de0a1de5ef6e0c0a413a15f54d862e21fdbcfda9a961fb697af37227a53c751751a823533152892
- SSDEEP 24576:e1LbFHSb6xRUxyVK3WoHDYPQCppFFuzZWEBHe:eFxHY6x2xyVyhjTCppKzZjg
- TLSH T17D155B44FE8BA0F1EAA709769997E36F96309F018231EB76FF6D5A46FA32F101435005
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/libusb-1.0.dll
- Size 232KB
- SHA256 c7acfb7e268d35397252c27f98f48c28e071a94364151b6eea6e57318b29980d
- MD5 f9d1c2e68cb0908fd77a66e69f418cc0
- SHA1 cbb1793308863009f119b7be741dc6dc08aa61bb
- SHA512 2d1f1b7bcfcb6b81a30f27dbeae97e65dc48f3975fec55c31e65d3b78376280521b1125c969bbdc951d44571bf397c9fa6cfe39b43fd5080383f2e5adbe1f548
- SSDEEP 6144:j70SjdcnJBCuZDsxhzgm6d9b2rw4TfD6iGirO9HBDg:vT2BCuZDsxhgzYwgD6iY9H5g
- TLSH T11F343A5FDE8A88B5D55344B109CFE2BFC630A772C612CFBEDB582904BE27B61250D606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target scrcpy-win32-v2.7/open_a_terminal_here.bat
- Size 5B
- SHA256 843758795a84d0d035a7d277ad29cc1ff1702048b4b61ae74b9e3439ae683423
- MD5 98359f622a36689d7d76e00c28c5636f
- SHA1 2dabc0389dd92cbe254a071958725d8ca7a2467c
- SHA512 46bef76e29bc0ea93e15a32f275a7e0607d978da5e1390d2b336e99fa6531e598e4468c43660adb406ab85964e36b859d402314da4af8f17bc5cb8ab7df0676f
- MD5 SHA1 SHA512
Score3/10