Overview

overview

9

Static

static

9

更多系�...�.html

windows7-x64

1

更多系�...�.html

windows10-2004-x64

1

q779596940_Setup.exe

windows7-x64

9

q779596940_Setup.exe

windows10-2004-x64

远程监�...em.dll

windows7-x64

3

远程监�...em.dll

windows10-2004-x64

3

远程监�...ma.exe

windows7-x64

3

远程监�...ma.exe

windows10-2004-x64

3

远程监�...ib.exe

windows7-x64

3

远程监�...ib.exe

windows10-2004-x64

3

远程监�...ip.exe

windows7-x64

1

远程监�...ip.exe

windows10-2004-x64

1

远程监控/dp1.dll

windows7-x64

3

远程监控/dp1.dll

windows10-2004-x64

3

远程监�...72.exe

windows7-x64

8

远程监�...72.exe

windows10-2004-x64

8

远程监�...ln.dll

windows7-x64

1

远程监�...ln.dll

windows10-2004-x64

1

远程监�...��.exe

windows7-x64

3

远程监�...��.exe

windows10-2004-x64

3

远程监�...��.exe

windows7-x64

1

远程监�...��.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    11s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 18:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    远程监控/LZMA/zip.exe

  • Size

    451KB

  • MD5

    83565b9f7cfef8963a9abeeb342d609d

  • SHA1

    1fb1b87b03e18e8c6fd8a87170193b4042d05c00

  • SHA256

    79d9e7bf6dd404530752209002e5352e5988b8dbc79958fc20ac0141a73d19d2

  • SHA512

    4cef69c3b6325ef6ddf1e40c60f2c63db9e1f9452f049abd3eace2609fe0d5401ed6d3cebae5ec7019c1361a5151d75e17e7c13ff6ae2181af2f56dc35f413c3

  • SSDEEP

    12288:8cwb8leqQOtzbtd9U817dygf08ulPVwknXYgZCiq0eT:8cwbzqpzT77d7f08uXtYmCH0eT

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\远程监控\LZMA\zip.exe
    "C:\Users\Admin\AppData\Local\Temp\远程监控\LZMA\zip.exe"
    1⤵
      PID:956

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads