Overview

overview

10

Static

static

1

大航全�...API.db

windows10-1703-x64

3

大航全�...API.db

windows7-x64

3

大航全�...API.db

windows10-2004-x64

3

大航全�...��.exe

windows10-1703-x64

10

大航全�...��.exe

windows7-x64

10

大航全�...��.exe

windows10-2004-x64

10

大航科�...API.db

windows10-1703-x64

3

大航科�...API.db

windows7-x64

3

大航科�...API.db

windows10-2004-x64

3

大航科�...��.exe

windows10-1703-x64

10

大航科�...��.exe

windows7-x64

10

大航科�...��.exe

windows10-2004-x64

10

Resubmissions

16-04-2023 17:34

230416-v5hkcsce3x 10

16-04-2023 17:26

230416-vzvbzaag27 10

Analysis

  • max time kernel
    91s
  • max time network
    116s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-04-2023 17:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    大航全球实体卡-虚拟卡接码电脑端口/X64/DIFXAPI.db

  • Size

    10.0MB

  • MD5

    216d9df008dd6f1d3df83fce613524f6

  • SHA1

    3b5f566334d588add84a0c7983187bccfbbf5aa7

  • SHA256

    86be4940c2fc18eda11fa860c815eddcf98689aea446814127622bd47abec547

  • SHA512

    bab7288b6a3740fe14cfd8e325fa78528f2288e87b08e60bf88f0753f99b6ffa4663933718e176b2549f371dfd85735424146d4b751d065324d1ff6dc8e9061c

  • SSDEEP

    98304:27mUa6pMlGs+XMdFtDkHYOToHYOTFHYKHY6HYpwaLsyJ95xJm1hEVT4eNTigdGWO:EmVfcMv1iwaQQxJlTENIJranuf2jZ

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\大航全球实体卡-虚拟卡接码电脑端口\X64\DIFXAPI.db
    1⤵
      PID:1000

    Network

    MITRE ATT&CK Matrix ATT&CK v6

    Initial Access

    Execution

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    System Information Discovery

    1
    T1082

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Replay Monitor

    Loading Replay Monitor...

    Downloads