Overview

overview

10

Static

static

10

lolyhzs_ve...py.dll

windows7-x64

10

lolyhzs_ve...py.dll

windows10-2004-x64

10

lolyhzs_ve....6.exe

windows7-x64

7

lolyhzs_ve....6.exe

windows10-2004-x64

7

lolyhzs_ve...KT.dll

windows7-x64

8

lolyhzs_ve...KT.dll

windows10-2004-x64

1

lolyhzs_ve...ss.exe

windows7-x64

1

lolyhzs_ve...ss.exe

windows10-2004-x64

1

lolyhzs_ve...��.url

windows7-x64

1

lolyhzs_ve...��.url

windows10-2004-x64

Analysis

  • max time kernel
    41s
  • max time network
    56s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2022 07:41

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Reading agent response: Timeout while submitting payload
Report Analysis Logs

General

  • Target

    lolyhzs_veryhuo.com/最火软件站.url

  • Size

    179B

  • MD5

    a9f77e4cd187af05a6a16b372f42190c

  • SHA1

    c81d9af0b5f5070a48e21b86a1ef6613616a2200

  • SHA256

    975aaddc0d28d3bdf4f7cebb546d1ec0ff2b9b9a86ffe1642265f9d5f1136f7f

  • SHA512

    534fd5631b0ba0547709756b8e1564d4d168136f4806d8edd9cd926c101ea31063bb71ab364b93de3c25f5850b1ee19389d539a5e65379d5080b9b1b7412f588

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\rundll32.exe
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\lolyhzs_veryhuo.com\最火软件站.url
    1⤵
      PID:3092

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads