Analysis
-
max time kernel
142s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
16-08-2023 03:06
General
-
Target
肖筱果_南洋理工大学_软件工程__大学成绩报表.exe
-
Size
3.8MB
-
MD5
6e61adc051bfc81df976f6866d80cac5
-
SHA1
2175c5aaffa7301b1ad4f6609ee7ea89a5a8d38c
-
SHA256
bc8a7dedc9ad7186a0b16a61e0bf3a170e89f054b888df32e25d5dbf198fa2af
-
SHA512
d6b85e63d1975bd2b1aa857368ee0dccf91ed18ab7ab86d1988f2dff4b388004becd7ea8e7a93f4ff69108a2793510f2347f26c41aab3f8202f2099e5e7c8b04
-
SSDEEP
98304:0a4x2hXK0qbkCu6xn0d7q6c9SNKbp3SoWaG35KehxfZO:07YXK0qbkQmd26c9SN+p3SoW9Uehx4
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\肖筱果_南洋理工大学_软件工程__大学成绩报表.exe"C:\Users\Admin\AppData\Local\Temp\肖筱果_南洋理工大学_软件工程__大学成绩报表.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Public\Documents\nvcontainer.exeC:\Users\Public\Documents\nvcontainer.exe curvy-accouter-missing-broiler2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.8MB
MD5b8c359cd55a61f82f672efe6698ed82f
SHA17db604f0888ade2f7b491c7b02cfdd2182f7c8a0
SHA25656866e266238b3ce515d12472bcac501d61bcee47515d6c706bc31cb42c42696
SHA5122afddbd4d99b8ff10401329e974d309dec7500d4b7e6eb69bbd4721018491ae88865ad04d4c1ab05dacae9bb49a4f387e54c6a3f65d08a3e61b5e5643697658b
-
Filesize
3.8MB
MD5b8c359cd55a61f82f672efe6698ed82f
SHA17db604f0888ade2f7b491c7b02cfdd2182f7c8a0
SHA25656866e266238b3ce515d12472bcac501d61bcee47515d6c706bc31cb42c42696
SHA5122afddbd4d99b8ff10401329e974d309dec7500d4b7e6eb69bbd4721018491ae88865ad04d4c1ab05dacae9bb49a4f387e54c6a3f65d08a3e61b5e5643697658b
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB