1a9f9b750b1fd6605b3e300e950bdca77874b0f7bdffdf1b11171c95a55f322c | Triage

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 13:01

Sharing

Report Analysis Logs

General

Target

8.21换.exe
Size

8.9MB
MD5

f80354107004f7b95d5c9d95d46709d9
SHA1

fb5dd971ac87816ed504a8e4ebbb99209d23267a
SHA256

1a9f9b750b1fd6605b3e300e950bdca77874b0f7bdffdf1b11171c95a55f322c
SHA512

56792292a9e0e2ac370b6a33ea3248e9e101ba43ee866152bbd087ea27e681e32dbae3654f4827c108c431965cb9994952932a7b0baa4482eeda332a567c76ae
SSDEEP

196608:Yhsxx7HR6b9NF9sDm1kBImpoppvpHpQecybx7InjxBtIu9G5:u+JHR6JN0poppxp6ox7InVEIY

Score

1^/10

Malware Config

Signatures

Modifies Control Panel 3 IoCs

Processes:

8.21换.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-3499517378-2376672570-1134980332-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	8.21换.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3499517378-2376672570-1134980332-1000\Control Panel\International\iDate = "2"	8.21换.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3499517378-2376672570-1134980332-1000\Control Panel\International\sDate = "."	8.21换.exe

C:\Users\Admin\AppData\Local\Temp\8.21换.exe
"C:\Users\Admin\AppData\Local\Temp\8.21换.exe"
1⤵
- Modifies Control Panel
PID:832

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/832-54-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/832-55-0x0000000000400000-0x00000000037A0000-memory.dmp

Filesize
51.6MB

Download