Overview

overview

10

Static

static

点击安...34.exe

windows7-x64

3

点击安...34.exe

windows10-2004-x64

3

英文客...4d.exe

windows7-x64

8

英文客...4d.exe

windows10-2004-x64

8

话术大全@88.exe

windows7-x64

4

话术大全@88.exe

windows10-2004-x64

1

资金盘...@.exe

windows7-x64

8

资金盘...@.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    14s
  • max time network
    93s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-10-2022 13:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    点击安装(飞机)简体中文语言包_v34.exe

  • Size

    111KB

  • MD5

    cefc0e9cacf1aaa6fd238739d2c73778

  • SHA1

    79d801453e0985157c15667b7c5b4dccee202c01

  • SHA256

    1e893be559a9628d4fc10ba009ecec9640f9b01db2162d7cf003a1ce10b247cd

  • SHA512

    9107d86a951a055cf558303a95bb565d867ff05d6d92dc3fc68489758ab87e6f514370361f14763acd81ab31f3dba099c5da443189e784b8a0c5355a74c2b275

  • SSDEEP

    1536:u5nBnqbxKJ38W2wUa0STkuWBzsIE9guaj6qxGfSVR1hSGYH+8VJ3uc9dlSfjgfsM:wJ3nnU1zLESz6GxVR1h6+8GUU2jisj

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\点击安装(飞机)简体中文语言包_v34.exe
    "C:\Users\Admin\AppData\Local\Temp\点击安装(飞机)简体中文语言包_v34.exe"
    1⤵
      PID:3420
    • C:\Users\Admin\AppData\Local\Temp\点击安装(飞机)简体中文语言包_v34.exe
      "C:\Users\Admin\AppData\Local\Temp\点击安装(飞机)简体中文语言包_v34.exe"
      1⤵
        PID:3420

      Network

      MITRE ATT&CK Matrix ATT&CK v6

      Initial Access

      Execution

      Persistence

      Privilege Escalation

      Defense Evasion

      Credential Access

      Discovery

      System Information Discovery

      1
      T1082

      Lateral Movement

      Collection

      Exfiltration

      Command and Control

      Impact

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3420-132-0x0000020FBE9E0000-0x0000020FBEA24000-memory.dmp
        Filesize

        272KB

        Download
      • memory/3420-133-0x0000020FBE9E0000-0x0000020FBEA24000-memory.dmp
        Filesize

        272KB

        Download
      • memory/3420-132-0x0000020FBE9E0000-0x0000020FBEA24000-memory.dmp
        Filesize

        272KB

        Download
      • memory/3420-133-0x0000020FBE9E0000-0x0000020FBEA24000-memory.dmp
        Filesize

        272KB

        Download