Overview

overview

10

Static

static

7

infected20...1).chm

windows7-x64

1

infected20...1).chm

windows10-2004-x64

7

infected20...df.exe

windows7-x64

7

infected20...df.exe

windows10-2004-x64

7

infected20...�1.exe

windows7-x64

1

infected20...�1.exe

windows10-2004-x64

1

infected20...ls.exe

windows7-x64

7

infected20...ls.exe

windows10-2004-x64

7

infected20...fo.exe

windows7-x64

7

infected20...fo.exe

windows10-2004-x64

7

infected20...od.exe

windows7-x64

7

infected20...od.exe

windows10-2004-x64

7

infected20...25.exe

windows7-x64

7

infected20...25.exe

windows10-2004-x64

7

infected20...��.exe

windows7-x64

1

infected20...��.exe

windows10-2004-x64

1

infected20...nd.exe

windows7-x64

1

infected20...nd.exe

windows10-2004-x64

1

infected20...eg.exe

windows7-x64

10

infected20...eg.exe

windows10-2004-x64

10

infected20...#r.exe

windows7-x64

7

infected20...#r.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    25-04-2023 15:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    infected2023042501/Downloads/2023企业个人最新版所得税缴纳标准1.exe

  • Size

    2.5MB

  • MD5

    d14a9b37ad635a9167381973a5b42271

  • SHA1

    a5836ea7760b36401e32223daade0a6de5d6276e

  • SHA256

    c56fc1011190aa878ed26be29e8a6f9a5f4d91f35a5e4adbab00f1fd941c5ba7

  • SHA512

    fbff0c3e9256ae7479fc7d6b9b939a80c68d5555c14ae839ba7b690dd56e3cdd54d983460ee92411b10ccb45128d9956ab9d9187dd9709b00a13740980b1c96e

  • SSDEEP

    49152:SJU24IKR63igl5DHMsSEADK4O77TEtuSxyyWvZNu:SJUtIm63BlmFEADKl77TWuSxyyWv7

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\infected2023042501\Downloads\2023企业个人最新版所得税缴纳标准1.exe
    "C:\Users\Admin\AppData\Local\Temp\infected2023042501\Downloads\2023企业个人最新版所得税缴纳标准1.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1060-56-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

    Download