Overview

overview

4

Static

static

程設A_11...�.docx

windows7-x64

4

程設A_11...�.docx

windows10-2004-x64

1

程設A_11...m1.vbs

windows7-x64

1

程設A_11...m1.vbs

windows10-2004-x64

1

程設A_11...er.vbs

windows7-x64

1

程設A_11...er.vbs

windows10-2004-x64

1

程設A_11...es.vbs

windows7-x64

1

程設A_11...es.vbs

windows10-2004-x64

1

程設A_11...p1.exe

windows7-x64

1

程設A_11...p1.exe

windows10-2004-x64

1

程設A_11...p1.exe

windows7-x64

1

程設A_11...p1.exe

windows10-2004-x64

1

程設A_11...m1.vbs

windows7-x64

1

程設A_11...m1.vbs

windows10-2004-x64

1

程設A_11...er.vbs

windows7-x64

1

程設A_11...er.vbs

windows10-2004-x64

1

程設A_11...es.vbs

windows7-x64

1

程設A_11...es.vbs

windows10-2004-x64

1

程設A_11...p2.exe

windows7-x64

1

程設A_11...p2.exe

windows10-2004-x64

1

程設A_11...p2.exe

windows7-x64

1

程設A_11...p2.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    34s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03-11-2022 16:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe

  • Size

    13KB

  • MD5

    1ca5f64d5323ebe1986a13a13b5c645d

  • SHA1

    980595fa0fd9a98e49a85ebf1b0e556426006359

  • SHA256

    bafefcb926a47b30d13b4ce185ef4e52211c71c87ba583ed90dd5720e4a923e4

  • SHA512

    7ed3cc2bf98287ea2230b278f867ca7ffbd0142e33405202012044b80e39d6caf673e1215837d849115dca0266a3769263d52b08364dc0c6634a777f54985bc9

  • SSDEEP

    384:poyldUrLQdBTW2bLpqX28EfU6hPeLNDLR7s+HVL3LKLp+HFfKr9w:pofwPadtpbWQHEr9w

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\程設A_11133107_余庭嫻\程式檔\找零程式\WindowsFormsApp1\WindowsFormsApp1\bin\Debug\WindowsFormsApp1.exe
    "C:\Users\Admin\AppData\Local\Temp\程設A_11133107_余庭嫻\程式檔\找零程式\WindowsFormsApp1\WindowsFormsApp1\bin\Debug\WindowsFormsApp1.exe"
    1⤵
      PID:1348

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1348-54-0x0000000000CD0000-0x0000000000CDA000-memory.dmp

      Filesize

      40KB

      Download

    • memory/1348-55-0x0000000074F41000-0x0000000074F43000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1348-56-0x0000000004C05000-0x0000000004C16000-memory.dmp

      Filesize

      68KB

      Download