Overview
overview
8Static
static
8�...��.exe
windows7-x64
8�...��.exe
windows10-2004-x64
8�...��.exe
windows7-x64
5�...��.exe
windows10-2004-x64
�....0.exe
windows7-x64
7�....0.exe
windows10-2004-x64
7�...��.doc
windows7-x64
4�...��.doc
windows10-2004-x64
1�...��.url
windows7-x64
1�...��.url
windows10-2004-x64
1Analysis
-
max time kernel
211s -
max time network
337s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
24/11/2022, 11:33
Behavioral task
behavioral1
Sample
ļ/KLD_ļ.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ļ/KLD_ļ.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
ļ/°汾鿴.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
ļ/°汾鿴.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
ļ/C-CAR V4.0.exe
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
ļ/C-CAR V4.0.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
ļ/ļϸ˵.doc
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
ļ/ļϸ˵.doc
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
ļ .url
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
ļ .url
Resource
win10v2004-20221111-en
General
-
Target
ļ/°汾鿴.exe
-
Size
816KB
-
MD5
87192265e13bdbb9faf7a617f8b546c6
-
SHA1
f7cb3cdcb6c87f42d5db8ff19e7471f5730a1fac
-
SHA256
09c4eb7f6e8a050eb2e7c4128fb6646ae8cd0c4c6b624276cc0c16cb223dcf12
-
SHA512
928f1dcfb993a89c986b925095bfc8688459dbde8ea81b1cdff6705b0ebe7bd3aa784644144101b6c43971934003ff0283f59b14d356a6ed12f0a88fd37ecb1b
-
SSDEEP
24576:O3xEEHH8YHQWlz4Ai5NB4ZAWH/O6Yd9V1YYgtXsh:d+8YHFz47XMAo/jw9ndB
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 692 °汾鿴.exe