Overview

overview

10

Static

static

热血传�...��.htm

windows7-x64

10

热血传�...��.htm

windows10-2004-x64

10

传奇私�...��.exe

windows7-x64

3

传奇私�...��.exe

windows10-2004-x64

3

热血传�...��.url

windows7-x64

1

热血传�...��.url

windows10-2004-x64

1

热血传�...��.exe

windows7-x64

1

热血传�...��.exe

windows10-2004-x64

1

热血传�...��.url

windows7-x64

1

热血传�...��.url

windows10-2004-x64

1

Analysis

  • max time kernel
    46s
  • max time network
    53s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    28-11-2022 02:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    热血传奇花屏补丁下载/商业版本下载.url

  • Size

    295B

  • MD5

    b0f2354092de332d38c3e4f45c9ffba6

  • SHA1

    896caa63da9a4778aa4ccc7a692c463a5660437d

  • SHA256

    b33f5408252c786a1bb2a3a8213d21ee646c9c1f1f3080716b4afd8bfa32f65c

  • SHA512

    1581fdcfcc5ae2b9fb591798228cac985b4eb4de22861ccda8f8e742dc321cabdbc8d15d97deb5fee43db88f3b0b5667a966bc7aed719168fceeb0b897c253f5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\rundll32.exe
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\热血传奇花屏补丁下载\商业版本下载.url
    1⤵
      PID:1544

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1544-54-0x000007FEFBB71000-0x000007FEFBB73000-memory.dmp
      Filesize

      8KB

      Download