Analysis
-
max time kernel
128s -
max time network
138s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
-
submitted
10-08-2023 03:07
General
-
Target
2023年最新关于调整职工生育保险有关政策的通知.exe
-
Size
5.5MB
-
MD5
67eb474609c84fb99fcffc57dd579f7a
-
SHA1
805b48c68c19f81f8365606479a9ec77de0f0b3f
-
SHA256
188ce9695e29c27932421a3f2ef93a6c91a9cae82c9b0b8f0b857dea7bfb2938
-
SHA512
617045da0e453971ed61d2b08d23367278734af27cf3995a7791b785ac3082ad7c68b953a3271cea3214b6c6dcd74a0836cdda39cc3f201f8f15b194a0a68119
-
SSDEEP
98304:xjHpXU39KwQOPEMGhIlDMU+btBtwFJTJqXMcDiD+j8FraCqbNb:xjH5U39KIPE8MU+9wnT+4FGhd
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023年最新关于调整职工生育保险有关政策的通知.exe"C:\Users\Admin\AppData\Local\Temp\2023年最新关于调整职工生育保险有关政策的通知.exe"1⤵
- Enumerates connected drives
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18.9MB
-
Filesize
380KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
18.9MB
-
Filesize
380KB