Overview

overview

9

Static

static

8

3km2-20120...��.chm

windows7-x64

1

3km2-20120...��.chm

windows10-2004-x64

1

3km2-20120...cn.url

windows7-x64

1

3km2-20120...cn.url

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...rv.exe

windows7-x64

8

3km2-20120...rv.exe

windows10-2004-x64

8

3km2-20120...al.dll

windows7-x64

1

3km2-20120...al.dll

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

9

3km2-20120...er.exe

windows10-2004-x64

9

3km2-20120...le.dll

windows7-x64

9

3km2-20120...le.dll

windows10-2004-x64

9

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...��.exe

windows7-x64

1

3km2-20120...��.exe

windows10-2004-x64

1

3km2-20120...ne.exe

windows7-x64

1

3km2-20120...ne.exe

windows10-2004-x64

1

3km2-20120...��.bat

windows7-x64

1

3km2-20120...��.bat

windows10-2004-x64

1

3km2-20120...��.exe

windows7-x64

1

3km2-20120...��.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    165s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-11-2022 14:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3km2-20120528[1117]/3K20120528(0404)合击引擎/LoginSrv/LoginSrv.exe

  • Size

    333KB

  • MD5

    c07b785b690fb9dfa0b404c6e69a7001

  • SHA1

    b236a4720d6ac9426f40195fa5619a8c6eb24fff

  • SHA256

    27f4d216da33de9541a9e30702caa1ffeb68ca6e3e904382d3f8b1aba79e27b1

  • SHA512

    47a0904d5d7a2143795e41ed7e6b8efd6e2816f502748921d0f3dbf53bd5d83ba041926b0e458aa5f3423f3752c6454074af9d8b9189138a1e9ac04946cd493e

  • SSDEEP

    6144:LOzLPjdf+/66Z5TsfkRumVMPz3apGeAyx8WXc5FshwBWJg6djNVYmxtu+:LOz/t+/phckwJr346eCF9WZNntu+

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\3km2-20120528[1117]\3K20120528(0404)合击引擎\LoginSrv\LoginSrv.exe
    "C:\Users\Admin\AppData\Local\Temp\3km2-20120528[1117]\3K20120528(0404)合击引擎\LoginSrv\LoginSrv.exe"
    1⤵
      PID:400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/400-132-0x0000000000400000-0x00000000004EC000-memory.dmp

      Filesize

      944KB

      Download

    • memory/400-133-0x0000000000400000-0x00000000004EC000-memory.dmp

      Filesize

      944KB

      Download