Overview

overview

1

Static

static

1

封包拦截器.exe

windows7-x64

1

封包拦截器.exe

windows10-2004-x64

1

当下软件园.url

windows7-x64

1

当下软件园.url

windows10-2004-x64

1

Analysis

  • max time kernel
    123s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231127-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2023, 19:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    当下软件园.url

  • Size

    126B

  • MD5

    50749cc0e0eb14c35a7c920c79d3d1b7

  • SHA1

    dfb716345685b240f52fad649f06f2ed3b431fa5

  • SHA256

    2019270daaa65e88866de5bedd97d6b8285c79bbf4f192c842aa3c945f21518c

  • SHA512

    95ebc6752f0ffaedf2c6cf37879e181c731e6eb6c6cf8545f0a4d05650a31e41cc684d8e3728409c636af51e8573af5f23d6fbea0051720d38fd5cb4db446cb1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\rundll32.exe
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\当下软件园.url
    1⤵
      PID:4248

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads