983748c25d0701763e2d22718371bc136838148f1d0918778906da5d52617f26 | Triage

Submit
Reports

Overview

overview

Static

static

7

1/10月26�...��.exe

windows7-x64

7

1/10月26�...��.exe

windows10-2004-x64

7

1/2023年1...��.exe

windows7-x64

1

1/2023年1...��.exe

windows10-2004-x64

1

1/AggregatorHost.exe

windows7-x64

7

1/AggregatorHost.exe

windows10-2004-x64

7

1/PO202302...60.exe

windows7-x64

1

1/PO202302...60.exe

windows10-2004-x64

1

1/TIanagents.exe

windows7-x64

1

1/TIanagents.exe

windows10-2004-x64

1

1/c.exe

windows7-x64

1/c.exe

windows10-2004-x64

1/loader.exe

windows7-x64

1

1/loader.exe

windows10-2004-x64

1

1/【东�...10.exe

windows7-x64

1/【东�...10.exe

windows10-2004-x64

1/【企�...��.exe

windows7-x64

1/【企�...��.exe

windows10-2004-x64

1/【财�...��.exe

windows7-x64

7

1/【财�...��.exe

windows10-2004-x64

1/内容.exe

windows7-x64

3

1/内容.exe

windows10-2004-x64

3

1/外挂 �...xf.exe

windows7-x64

3

1/外挂 �...xf.exe

windows10-2004-x64

3

Analysis

max time kernel
148s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
20-12-2023 12:39

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

1/10月26日最新发布-财会人员薪资补贴所需材料.exe

Resource

win7-20231129-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

1/10月26日最新发布-财会人员薪资补贴所需材料.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

1/2023年10月新发-财会人员薪资补贴调整新政策所需材料.exe

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

1/2023年10月新发-财会人员薪资补贴调整新政策所需材料.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

1/AggregatorHost.exe

Resource

win7-20231129-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

1/AggregatorHost.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

1/PO20230225-13360.exe

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

1/PO20230225-13360.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

1/TIanagents.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

1/TIanagents.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

1/c.exe

Resource

win7-20231129-en

metasploit backdoor trojan upx

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

1/c.exe

Resource

win10v2004-20231215-en

metasploit backdoor trojan upx

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

1/loader.exe

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

1/loader.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

1/【东莞信易贷平台】企业认证资料无法上传-文件大小不能超过5MB，请重新上传-202310.exe

Resource

win7-20231129-en

cobaltstrike 100000 backdoor trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral16

Sample

1/【东莞信易贷平台】企业认证资料无法上传-文件大小不能超过5MB，请重新上传-202310.exe

Resource

win10v2004-20231215-en

cobaltstrike 100000 backdoor trojan

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral17

Sample

1/【企业认证资料】企业认证资料包含营业执照原件，身份证等信息等，已��.exe

Resource

win7-20231215-en

cobaltstrike 100000 backdoor trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

1/【企业认证资料】企业认证资料包含营业执照原件，身份证等信息等，已��.exe

Resource

win10v2004-20231215-en

cobaltstrike 100000 backdoor trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral19

Sample

1/【财务部】关于工资调整通知.exe

Resource

win7-20231215-en

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

1/【财务部】关于工资调整通知.exe

Resource

win10v2004-20231215-en

cobaltstrike 0 backdoor trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

1/内容.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

1/内容.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

1/外挂王者吃鸡绝地辅助链接可测试_xf.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

1/外挂王者吃鸡绝地辅助链接可测试_xf.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

1/TIanagents.exe
Size

1.4MB
MD5

26dce2724601f85b133a824939870d23
SHA1

aed465acff008745242ae26b7a59f3d703abdf32
SHA256

7809551d96107aa1176aa003830a30f442c3df654a311054f6bd198873748538
SHA512

4758bf4b756ab72ddd3dc73c557b7dea64d43c35fb7de64c17ca221267c0ea63a272c44f51a20bf87c4a493f917c3416288cdc1ab26371ae99069c4a5e08dd86
SSDEEP

24576:k91X8OgVEmr20iaFCJZ/SCaaf6oV09aTWJaVsEiXb:e1rgK220H0Jtaaf60QaTsNL

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\1\TIanagents.exe
"C:\Users\Admin\AppData\Local\Temp\1\TIanagents.exe"
1⤵
PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1492-0-0x0000001315900000-0x0000001315E00000-memory.dmp

Filesize
5.0MB

Download

© 2018-2024

Terms | Privacy