Analysis

  • max time kernel
    138s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-08-2023 03:07

General

  • Target

    2023年最新关于调整职工生育保险有关政策的通知.exe

  • Size

    5.5MB

  • MD5

    67eb474609c84fb99fcffc57dd579f7a

  • SHA1

    805b48c68c19f81f8365606479a9ec77de0f0b3f

  • SHA256

    188ce9695e29c27932421a3f2ef93a6c91a9cae82c9b0b8f0b857dea7bfb2938

  • SHA512

    617045da0e453971ed61d2b08d23367278734af27cf3995a7791b785ac3082ad7c68b953a3271cea3214b6c6dcd74a0836cdda39cc3f201f8f15b194a0a68119

  • SSDEEP

    98304:xjHpXU39KwQOPEMGhIlDMU+btBtwFJTJqXMcDiD+j8FraCqbNb:xjH5U39KIPE8MU+9wnT+4FGhd

Score
6/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2023年最新关于调整职工生育保险有关政策的通知.exe
    "C:\Users\Admin\AppData\Local\Temp\2023年最新关于调整职工生育保险有关政策的通知.exe"
    1⤵
    • Enumerates connected drives
    PID:2076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2076-133-0x0000000000400000-0x00000000016F2000-memory.dmp

    Filesize

    18.9MB

  • memory/2076-134-0x0000000001D40000-0x0000000001D9F000-memory.dmp

    Filesize

    380KB

  • memory/2076-135-0x0000000003750000-0x0000000003751000-memory.dmp

    Filesize

    4KB

  • memory/2076-136-0x0000000003710000-0x0000000003711000-memory.dmp

    Filesize

    4KB

  • memory/2076-137-0x0000000003700000-0x0000000003701000-memory.dmp

    Filesize

    4KB

  • memory/2076-138-0x0000000003740000-0x0000000003741000-memory.dmp

    Filesize

    4KB

  • memory/2076-139-0x0000000003720000-0x0000000003721000-memory.dmp

    Filesize

    4KB

  • memory/2076-140-0x0000000003770000-0x0000000003771000-memory.dmp

    Filesize

    4KB

  • memory/2076-141-0x0000000000400000-0x00000000016F2000-memory.dmp

    Filesize

    18.9MB

  • memory/2076-142-0x0000000000400000-0x00000000016F2000-memory.dmp

    Filesize

    18.9MB

  • memory/2076-143-0x0000000001D40000-0x0000000001D9F000-memory.dmp

    Filesize

    380KB