Overview

overview

8

Static

static

??????????...om.exe

windows7_x64

8

??????????...om.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    关于针对开发和会员的质疑问题话术解答.7z

  • Size

    288KB

  • Sample

    210620-3ywbblz8qa

  • MD5

    0a390fdb2f66cc82ad74a41a5db5f96e

  • SHA1

    f87f6787feba427a660d0d03fac5174d89e30085

  • SHA256

    d278dd86853b897580936a9094d1c81b9fdbede64d62df5eacea6d2d15f74cf1

  • SHA512

    e49e2c3125523c6acaac9009e72a21f6fbb365620b57d7770eded85de175273f11747de045244fb4230517c81ff4a347054cfee36efb424a6031bfcb089f24ec

Score
8/10

Malware Config

Targets

    • Target

      ??????????????????.com

    • Size

      1.3MB

    • MD5

      38f4f7abbcc1860e23c23a6918f44cda

    • SHA1

      f3d3429fd5add2509ce5af0b42d24b01e1e161ee

    • SHA256

      f1412515481a806ff3350065c8fc0c4c667b1545738deadbf5a1e18291147e48

    • SHA512

      1b1a5c990a2eddfa0ad07d25cafd1144114ed5a78994da202cc29e018c50759f14638d970c7e82e95a8e2093c46161f3af034c4368847cd9ab697308bf35c758

    Score
    8/10

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks