Overview

overview

3

Static

static

Csrsrv.OCX.exe

windows7-x64

1

Csrsrv.OCX.exe

windows10-2004-x64

1

QQ显示ip...��.exe

windows7-x64

3

QQ显示ip...��.exe

windows10-2004-x64

3

QQ显示ip...��.exe

windows7-x64

3

QQ显示ip...��.exe

windows10-2004-x64

3

QQ显示ip...��.exe

windows7-x64

3

QQ显示ip...��.exe

windows10-2004-x64

3

SkinH.dll

windows7-x64

3

SkinH.dll

windows10-2004-x64

3

TOMCTML32.OCX.exe

windows7-x64

1

TOMCTML32.OCX.exe

windows10-2004-x64

1

当下软件园.url

windows7-x64

1

当下软件园.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11cb52c3b69e0a510481fbc205f2bc0312b76f0bf61d25698bc2838978b8aeb6

  • Size

    419KB

  • Sample

    221125-x359racg6x

  • MD5

    744fcb6630b29c830726ea37601d90a2

  • SHA1

    8db14eedfbeebc1158ece5a895207659267b9325

  • SHA256

    11cb52c3b69e0a510481fbc205f2bc0312b76f0bf61d25698bc2838978b8aeb6

  • SHA512

    a468d0bd549d34f89b216f9bab7179b3856bf588f6eced3c8c6d57fec093f601cb21c37eace621634dac89bcd819166ba7b9eaacbcccfebd43440c0ad882b586

  • SSDEEP

    12288:P5PapRpGKB84LkvPT7ILmh9BAdeVtZXoCDQAI6XsH663A:P5CLAUkvfZXoCkPH663A

Score
3/10

Malware Config

Targets

    • Target

      Csrsrv.OCX.EXE

    • Size

      40KB

    • MD5

      794e1106ffcf364a7311fc81d90e238e

    • SHA1

      c5d61fbe589871f2f684c77047706795f33e8580

    • SHA256

      f74376809deb13703f645a4b23ae68e18d25b823d93a11afb2eee30d7e07571f

    • SHA512

      156bf42f7141dbd5e09d1442fe46fc58de554cafdfd2b99a393d1e5f325e76c3fafeb4ffefd6705a54089ffc7d9330e355e006e514ed22483c2aa814d4191308

    • SSDEEP

      768:hTI+fOM1iMs1u1YCEcIr/WMsOfOM1QtT:FICOMIr/ROMmZ

    Score
    1/10
    behavioral1behavioral2

    • Target

      QQ显示iphone在线.exe

    • Size

      60KB

    • MD5

      61465ebb534952d835d1171a43dace8c

    • SHA1

      a6c5d803dff62965ccb715f493cd5c7650b66700

    • SHA256

      90909e2448291cb2dcf7aa1b5e3d4db1ce75815dcb9f0368d63badcf1c80d101

    • SHA512

      54498860d9264a3bd569a6b5b0d337609919c3d13f0ec15c542e3e199ff5ff193595765909b9128e71f7e19880572fa57869dd9848b7c0ab09c329145ff9cde9

    • SSDEEP

      768:PrxOZ38FjSLSZNu7OZ38FjSvJsRqOZ38FjS:PrqJLSZRJeR3J

    Score
    3/10
    behavioral3behavioral4

    • Target

      QQ显示iphone在线最新版.exe

    • Size

      60KB

    • MD5

      96582eace83621995a328122e2c24887

    • SHA1

      8bc00c1f3e90b03872917e556aa1cbc232e7fcb8

    • SHA256

      d413dfa2afc607e2b9031952c29a1d9640201a6da0f9534e08d237ba7fba7bb1

    • SHA512

      2675faacf8c3799d450fc5f1170c3f14b7020b982228022aa074a5a65bcd8b313a499bea8b84a0c8ac5d7e2481fe3f6d5476ac3f6e92aaa9a6c93f15a33b65cd

    • SSDEEP

      768:QasOZ38FjSUSOMQoR1OZ38FjSRZqstqOZ38FjS:/xJUSHQVJfDt3J

    Score
    3/10
    behavioral5behavioral6

    • Target

      QQ显示iphone在线最新版最新版.exe

    • Size

      60KB

    • MD5

      96582eace83621995a328122e2c24887

    • SHA1

      8bc00c1f3e90b03872917e556aa1cbc232e7fcb8

    • SHA256

      d413dfa2afc607e2b9031952c29a1d9640201a6da0f9534e08d237ba7fba7bb1

    • SHA512

      2675faacf8c3799d450fc5f1170c3f14b7020b982228022aa074a5a65bcd8b313a499bea8b84a0c8ac5d7e2481fe3f6d5476ac3f6e92aaa9a6c93f15a33b65cd

    • SSDEEP

      768:QasOZ38FjSUSOMQoR1OZ38FjSRZqstqOZ38FjS:/xJUSHQVJfDt3J

    Score
    3/10
    behavioral7behavioral8

    • Target

      SkinH.dll

    • Size

      96KB

    • MD5

      69f0c471a3f0964929b31dccbb817ef9

    • SHA1

      a4456d5b4b39f5d01bf10473a3d7d4ca3e649aec

    • SHA256

      a5e06515287258e21449579ca5d6f9a386fc52a5b5e87326e6da404fe1be5c76

    • SHA512

      c7bbe28d25495474153f3d70817888b04e3b06ddd7657ea4644293d3644689a7254c6fcf837824f6309f9b84f9d820fb55473d3e6ce17272f22f3cae2bd3b085

    • SSDEEP

      3072:61AlPrR14tzeTZeKujZVLR3OebMCuOAa8RK:esPrRQuujZZR3Oe1AA

    Score
    3/10
    behavioral10behavioral9

    • Target

      TOMCTML32.OCX.exe

    • Size

      596KB

    • MD5

      533b780dad3d61510d724d6bff8539e8

    • SHA1

      a6b8d6857f3b32d2231e5a3e19073996fa8901db

    • SHA256

      c95f19698d7368a5243a2eacf27f616422293d8fea9fd97f7606fbd09c98d908

    • SHA512

      b6557d62893b43bbedcf9b1ec8b2f4d0c0765862ed037a7763e5cf6a3110732eabfaaf22052139747460fc39cd449dc0398f177048f4b239292025daffce60b8

    • SSDEEP

      6144:t8wALxE16RS6iuOt/XmZaULDsTfyTdLn3RWDYYxDMOKzFZXxQVCMUz3joit23Cuo:txCnitOoULDsTKRblDvXxmI7cs

    Score
    1/10
    behavioral11behavioral12

    • Target

      当下软件园.url

    • Size

      191B

    • MD5

      bdcc801fa8403eaecc71f63b740915af

    • SHA1

      09c2f81338105d011694863280a76ea62a4e915e

    • SHA256

      cab4f112f7e56424a7a00e6b6235a81be1ea980c2bd6529be764037f29de2ce5

    • SHA512

      8af0b84bfd990c499b9bd7811d581f249c6b974bd13737468c05825cab019f340ca42d3a5ee4c54cfb79cfa60bf230058ada271fe49925a0b8aa7a191c13295d

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v6

Tasks