General
- Target 薪资补贴填写模板.exe
- Size 3.8MB
- Sample230417-azma5sec3w
- SHA256 35e5460c102ca2f996d61d70d6bb06fb87014f7d2beccf35f3812ea534acd9d5
- MD5 13edc9e053cfe10575e779d4e048af5b
- SHA1 e950cc66152aa2539f6d57a506abc40263f34297
- SHA512 20f9b6529a9b11f682249cfcc2c5fd666a88723939ff5746df54b2af71d8c31c54341885c53b02027d39d413f98b25d3dc565c077c8b8fe7fba84115e2577062
- SSDEEP 98304:PJydxM02SoemiJC45AGqybV8k4mh4YNrg8xubmKyHx:Ude02SZRC4G6Z8k4OTNbxumKa
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
薪资补贴填写模板.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
薪资补贴填写模板.exe
Resource
win10v2004-20230220-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 薪资补贴填写模板.exe
- Size 3.8MB
- SHA256 35e5460c102ca2f996d61d70d6bb06fb87014f7d2beccf35f3812ea534acd9d5
- MD5 13edc9e053cfe10575e779d4e048af5b
- SHA1 e950cc66152aa2539f6d57a506abc40263f34297
- SHA512 20f9b6529a9b11f682249cfcc2c5fd666a88723939ff5746df54b2af71d8c31c54341885c53b02027d39d413f98b25d3dc565c077c8b8fe7fba84115e2577062
- SSDEEP 98304:PJydxM02SoemiJC45AGqybV8k4mh4YNrg8xubmKyHx:Ude02SZRC4G6Z8k4OTNbxumKa
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL