General

  • Target

    11a9d20b2be97f4170b655c3ef2f727174a6b46a28ac94182b122adc39220c5e

  • Size

    2.8MB

  • Sample

    221127-dfs65ahf3z

  • MD5

    ad6ee21ddfef0d67af937851f3545601

  • SHA1

    5e16a8dfae805f0e462580f0fc56cf9c34175717

  • SHA256

    11a9d20b2be97f4170b655c3ef2f727174a6b46a28ac94182b122adc39220c5e

  • SHA512

    6c7030d4ee1212ba97aa9f1a9ce5715763e02d4b6bd76799ca36cde875d6a6d7e6784f09d74ee241d4b9715a0a925108d08fe84583223a7e58b1f3156083e84f

  • SSDEEP

    49152:Qe3tEaNXUkWERyT8pYhyAeD5pi0B3REaNXOkWERyTgDEhyAoH:Qe3Xt/RNpYZO3rtxRNDEM

Score
8/10

Malware Config

Targets

    • Target

      ͬļ/0.ͬļĿ¼.doc

    • Size

      46KB

    • MD5

      6405792304ba260e076936a44ba1a435

    • SHA1

      73d9af7239ca85968e7eb984c83051c075d13741

    • SHA256

      dd187ff9ac2af9f0214e02928769d477fd03254794c0eabe478cd8405303b5c8

    • SHA512

      1cb1843cc18ac1556d652d5e94f4a8e43d564ac6faf1e907ae8cd8e89b548e4c7425ea353bf6764af9759d0d10120fea3628a6b249d30039f78b2d8269fd9ce9

    • SSDEEP

      768:jfDkCM+eBZb0HjSxoRzWE2YEUMigWuioYcOkOkgnoX3YcuPNKEvVkoKgAPosMAuR:jquTAPoDcuL

    Score
    4/10
    • Target

      ͬļ/0.ͬļ.doc

    • Size

      30KB

    • MD5

      eeebacc8ea5347c2845aeead6b49cc03

    • SHA1

      818d9e9d3bf156f83997ea72fc5b0cde873fbd7b

    • SHA256

      b7c42e8b956a662210c627b640a820097ba51840abbd2e33a454bd9a9febf798

    • SHA512

      3cfbfd7ac16297d15a8c20323a6a78c22ef2d2b0935a54e1bb627413363483c16a37176c6ed3b1c44e87fb02d96b500bb18f18e9ad8dab305f122d2df0bc9bb8

    • SSDEEP

      384:L0000nWMJg9wXvemP8sFumbO4J2222CziSZfI/PKRyid2SP1M4O:DvJgN4uG2222yAPo/PyV

    Score
    4/10
    • Target

      ͬļ/1.ְͬЭ.doc

    • Size

      51KB

    • MD5

      19537605188447c0bf708c0dbc64dccb

    • SHA1

      83cfaf9adb9b11a9e940de5886480bfe81dc4691

    • SHA256

      d8a837f66a19b56daa579a29274adb915fb9990498f119a8ecd8d47410567b9a

    • SHA512

      906e9ece547f6aeccbd103aa15d20e2f4b7bd8c804fc0bed36c39f321a21fed11143eca92122ae33079c63af3746e6a34d63b6f75431ed463781506e48fffeb9

    • SSDEEP

      384:BcLX9BZXxs3rpRUX9btW+3KhUtX5knxHvA8R8VAqH8ZR5gL5D+QnLjt4p3++lOXu:BmW7MTg4APojpuo

    Score
    4/10
    • Target

      ͬļ/2.¼1 б֪ͨ.doc

    • Size

      46KB

    • MD5

      66621e0493b8d1b9115bf393a1075efa

    • SHA1

      577fd762a923269aced300cb57fcb6a3f30a7175

    • SHA256

      a634a4bd4ecb11845c22b98ebd1d2fa775bf2aa14c55a9f236c794a3dce4481e

    • SHA512

      d453555ff624fa124c62caa8c9aaffe8f4dd4119c9112e08517ea983545f05178514113834fe33334cf3f5c0d7fd684a07eee98ae386a5f4906b8ae5b025c56d

    • SSDEEP

      768:Ol1SkxOQBBUn+SD22reHoR42Nvc2vqj7G7RWrAPoU0:SOQBBUn+S1eHoR4wn4rAPoU

    Score
    4/10
    • Target

      ͬļ/2.¼2 ۳ŵ.pdf

    • Size

      179KB

    • MD5

      392e7a9e938b95b82578b26ee2c88957

    • SHA1

      46186a72792684474a84cb385cc9579e871a3f81

    • SHA256

      f2e007a9f58564b03e05c6841c8134596002a48efbb753c8dbdefe73ef06bb22

    • SHA512

      c74a81c041380c6a12887739179109be11cf1bf108fbc5b57545a467fd487184de086380827581a139267da64f5bd5c1d4e2c3172153903546ffbce26ae18609

    • SSDEEP

      3072:WTjSFC7mvPRfdgW0/Mpz9dYfdM5b1wHXzL5fkd:EjUvPRVLpz9dBJw3Pg

    Score
    1/10
    • Target

      ͬļ/2.¼3 ļ.doc

    • Size

      420KB

    • MD5

      314e4808881f7a5d661cffdcf46e08f9

    • SHA1

      1dfa3c195023740f878c1a2929639be16c4b6ec1

    • SHA256

      bfe9106d02b42c490fb7296560c095062526c2f314fff796592c6516e8a86995

    • SHA512

      cc8afdcfbf21cee3863224314de18eff722e0d3ee065687d00e6ef768cba9caa0d829f3464191201df1a06ee380f0a1522418c3ed564fb6b11640982669608ed

    • SSDEEP

      6144:iCoQOlChOm9/OzT8tqUx7KVqzneNvO0UBdjN3ycwEZL:Z4l0zA2qoVreNKBdjNiQZ

    Score
    4/10
    • Target

      ͬļ/2.¼4 ļһ.doc

    • Size

      415KB

    • MD5

      10f8fffb3dfc9da1d528e0acfd29c19c

    • SHA1

      3e0cbdfdd2f5796c48aaad424291ed16a3b486f9

    • SHA256

      29896708d937bd9f7f6fa08fa69e8d73798422bfae2f8f973e4dc1727d5aee02

    • SHA512

      74b5f920339a11088f5fed70bc838ee3cc0632aa865587370ad23875906614448f7118f006da590db8915f66f87205b3e816991cee6fc9a41f5b4f2a4455eb81

    • SSDEEP

      6144:wdQOlChOm9/OzT8tqUx7KVqzneNvO0UBdjN3ycwEZC:wPl0zA2qoVreNKBdjNiQZ

    Score
    4/10
    • Target

      ͬļ/2.¼5 ظܱ.doc

    • Size

      45KB

    • MD5

      0d31783fc2a6f0f1cac47525fcd4fed0

    • SHA1

      0ab04dd35a619a9da83e8e19d44c0c0527104349

    • SHA256

      cbfc066d529df3cc1ff71a8d18b08260f3a658cd23c27fbb76fec2b1a1db6661

    • SHA512

      4acc7288ee9108064992ece2797bf90a73cf3197a90111c7007581fca5eec9584a16cd7b91cae060654d645671d4fce3b45c920d69c3a8ae2cafd2ab728b188c

    • SSDEEP

      768:OSVSj11/YTkBpsCSkVNQt1mAPoKaJ9E93:FSp1/YTkBpsCSkVNS0APovvO3

    Score
    4/10
    • Target

      ͬļ/3.¼1 ŵ飨1ͬ¼.pdf

    • Size

      35KB

    • MD5

      383538a3fac5d4ff546876ea6c52149b

    • SHA1

      7684222cd6172980c9ec6b6330072b8322ee23b4

    • SHA256

      8d63a802684a3b6f5774813655d60de42b58e656834e046120c71f3cdf1fe575

    • SHA512

      45a92dbfe0c540b55b20249001c616d8a11ca7bea863f768ad13bb8b570a50931014ac82d11b78573652971dd0a52f4c2394925b7f4ba58cfff925986a3efa0d

    • SSDEEP

      768:UlUUmFHBzTnN0j875/Pupvw3qMpvl0on5WHWy3h4n+w:lzNtTnN0g75Hevwato5W2y3Vw

    Score
    1/10
    • Target

      ͬļ/3.¼2 ŵ飨2һŵ.xls

    • Size

      30KB

    • MD5

      7cc3b02c9b0b54572dfe83339de3efc6

    • SHA1

      5eb7b872478b8033188e6285a77d6fd6f1791f14

    • SHA256

      c39a4fc466051b75636a9fe2c348691d8d864c000c8c7f584e583464cdd72cfd

    • SHA512

      ba8c30008219a1e7310eb4425d5adb7c52f6ed27ec1fe1aa33b85859e582ea4df5352e5173f99736a33230fe8d277bbb2793a46f88a1f0dd9b082e23515eb39e

    • SSDEEP

      768:ROOOO67Dy1SNG1HrTCi9SGxRICqzLvT2MxQn6v7yZmspH7+7alMiEZClsPI4ukox:ROOOO67Dy1SNG1HrTCi9SGxRICqz9xQJ

    Score
    1/10
    • Target

      ͬļ/3.¼2.0 Ŀ滮ֱ.xls

    • Size

      102KB

    • MD5

      d6fe0db1d65093d48834a37c23f1b2ef

    • SHA1

      196e92930983bc27b62a8c125b02632d1c506ee4

    • SHA256

      178c26c65f02c12dcd58091fe8f11fb94d6910cf8ca0c174c44d7abdb60cb402

    • SHA512

      85ee0cb4181f96df8c6953b42459379e23f20d23ca51d346a7b1095664a455d94375003981c4360ea2fbd853aa00f40dbc846f9c5da0780b669e1d67a21a3037

    • SSDEEP

      3072:dtA1gxv7yZmspH7+cclKisbqb+xTENDi0Wxqg7yXpFrSMh+56d7:I1gxv7yZmspH7+cclKisbqb+xTENDi0n

    Score
    1/10
    • Target

      ͬļ/4.ְͬר.doc

    • Size

      140KB

    • MD5

      024c70ae8e30330a51101c0690b81df4

    • SHA1

      228f6b4cf902800941ab399a7fe9a999db9e2ba1

    • SHA256

      f6e13f25d4b0b588a779775d48f7c43143027b0edcebb6ad86478253e06f34bd

    • SHA512

      9f80b0183bc35249fd95fab6ec613d3baf6c9fa500ceedfe48572b028a4af82c0d655deb74d6742276c385d7443773144a9da5f4cfd5917e7258b2ffa5052d03

    • SSDEEP

      1536:MVx3r/6XJ51UfuOwMLuFPlxiwhTtfrnE4YNhqjGxSOqXt:MVxzYvUfxwMLmLhTtTn/qh6d

    Score
    4/10
    • Target

      ͬļ/4.¼1 ͬ¼.xls

    • Size

      31KB

    • MD5

      06442a6b32b6466688ee29e8faedb5d8

    • SHA1

      f622146baa1771f78a2cd98e0cf5ea214438f6ed

    • SHA256

      e408bfba2102cb460bcaca276ee99df6e42be9df4917729440cd4cfe32ca408e

    • SHA512

      fa8bd893a42e0b9d87870f2a0b2278cfae6f4dd94344acf3ee556b6d211a1eada5da2e6e6eeadbba6171ef90614e69b9f7695519d2ab9a58c86d6eb231404952

    • SSDEEP

      768:bgSSSSWX/SGWF37DySNiWhB4yaj7vT2KPQn6v7yZmspH7+7alMiEZClsPI4ukoRj:kSSSSWX/SGWF37DySNiWhB4yaj3PQn6s

    Score
    1/10
    • Target

      ͬļ/4.¼10 ïͬ㹤.pdf

    • Size

      142KB

    • MD5

      e63aac8f15b43dfab5b6863aede10196

    • SHA1

      bf6e9606813f647bc8e50cad4600fb4b1899f4fe

    • SHA256

      03fe55328bbf46c86a21ae2797d9df0128a10c8f034885d085e35f64b8cc73d7

    • SHA512

      12abc77df616f655cd614173155d655d5518a2228df5b638f0400355f6a7c147b485a2c1769cd4f9ca292e378dd3c82c46f02e759ea9f33cf2510a9241c29302

    • SSDEEP

      3072:Q9++KW/Kmu70x2MyEdOERq/GZbzvnMLbB0Ts+a0v:Q9++KW/X2ubqYzvnMLbm1aE

    Score
    1/10
    • Target

      ͬļ/4.¼2 ̷Χ.doc

    • Size

      50KB

    • MD5

      18098ace31a294fcfb54300a56b15fe3

    • SHA1

      2b783b880f65ed0d13b1e9f526b6b2109837a09c

    • SHA256

      b8285bd000af49ca29454bd038df1748831ccb48633777d0175ca714b792d2a8

    • SHA512

      c171fb725994d28bcafde0f10944b8e692e1cbbd506215ccdcc3a3381a83d224b58d019eda6cfbca003cbca517ea6b37d047657866a093fa40684ef6c649434e

    • SSDEEP

      768:yQ7ytpBLX5FL7BBMPHRGcPHCPiwphZT3dfm2nqDXiXAqyAPotY+t:ypiwhTtfrnE4QAPotY+t

    Score
    4/10
    • Target

      ͬļ/4.¼3 ŵ飨3ر.xls

    • Size

      27KB

    • MD5

      4678d515d231affbaefd68f265d59819

    • SHA1

      d698c8fff8b6e89fb39b9f9f6f4d3a8cdfa0b1c1

    • SHA256

      c1afb1931256b4729b57ffd14fcdd968ff03d2753956f98f2a240115c0322dd0

    • SHA512

      5218489f818c21d23fbe4661e961a8cf20b7aac65ac6e392d6bdd7cf34fc08006b7e9d941d5be5d4c58a5a52d63478dbb3dd67e6de373886c9db4b59c945b89c

    • SSDEEP

      768:KOOOO67Dy1SNRF37DySNiWhB4yaj7vT2wLQn6v7yZmspH7+7alMiEZClsPI4ukom:KOOOO67Dy1SNRF37DySNiWhB4yaj5LQu

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

15
T1112

Discovery

Query Registry

25
T1012

System Information Discovery

25
T1082

Tasks