Overview

overview

3

Static

static

3

待办整�...40.dll

windows7-x64

1

待办整�...40.dll

windows10-2004-x64

1

待办整�...z2.dll

windows7-x64

1

待办整�...z2.dll

windows10-2004-x64

1

待办整�...es.dll

windows7-x64

1

待办整�...es.dll

windows10-2004-x64

1

待办整�...al.dll

windows7-x64

1

待办整�...al.dll

windows10-2004-x64

1

待办整�...ib.dll

windows7-x64

1

待办整�...ib.dll

windows10-2004-x64

1

待办整�...ma.dll

windows7-x64

1

待办整�...ma.dll

windows10-2004-x64

1

待办整�...er.dll

windows7-x64

1

待办整�...er.dll

windows10-2004-x64

1

_collections_abc.pyc

windows7-x64

3

_collections_abc.pyc

windows10-2004-x64

3

_weakrefset.pyc

windows7-x64

3

_weakrefset.pyc

windows10-2004-x64

3

abc.pyc

windows7-x64

3

abc.pyc

windows10-2004-x64

3

codecs.pyc

windows7-x64

3

codecs.pyc

windows10-2004-x64

3

collection...__.pyc

windows7-x64

3

collection...__.pyc

windows10-2004-x64

3

collections/abc.pyc

windows7-x64

3

collections/abc.pyc

windows10-2004-x64

3

copyreg.pyc

windows7-x64

3

copyreg.pyc

windows10-2004-x64

3

encodings/...__.pyc

windows7-x64

3

encodings/...__.pyc

windows10-2004-x64

3

encodings/aliases.pyc

windows7-x64

3

encodings/aliases.pyc

windows10-2004-x64

3

Analysis

  • max time kernel
    126s
  • max time network
    176s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-11-2023 15:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    待办整理/_internal/_decimal.dll

  • Size

    247KB

  • MD5

    be315973aff9bdeb06629cd90e1a901f

  • SHA1

    151f98d278e1f1308f2be1788c9f3b950ab88242

  • SHA256

    0f9c6cc463611a9b2c692382fe1cdd7a52fea4733ffaf645d433f716f8bbd725

  • SHA512

    8ea715438472e9c174dee5ece3c7d9752c31159e2d5796e5229b1df19f87316579352fc3649373db066dc537adf4869198b70b7d4d1d39ac647da2dd7cfc21e8

  • SSDEEP

    6144:3V9E1CyOa72oP+pG1/dgD09qWM53pLW1ADDtLRO75e:jEgyOa72jw1/d4VVhLE5e

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\待办整理\_internal\_decimal.dll,#1
    1⤵
      PID:4896

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads