dfcb35ed4e9f536be760401024c5e2732e47790c48a55fb1b5f5c01ed3450008

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 03:41

Target

《倉頡平台2022》.exe
Size

5.0MB
MD5

84c6bf46d8f46ed4a5c277204d680a79
SHA1

3df7e2508653dce8b224f8a19484382682049d10
SHA256

a8925bbcec36479e04d4f9c55a59c81d1359d61bb5adc982ca67624c6f2c15c1
SHA512

0a6a1876b41701716ab3b4e62577b12a8ad8ae4abcb2c885cc50453f3816fe6ec8a8b5f1821302a52a473c7c58621fc1ac80229c1ecc60d712386f584e755813
SSDEEP

98304:X1T5CurNXOLGGHMX+aA//OKIAMmqCHEVPRXqaT+ZRQDI28:Xd5YLGh4eK7H15ZRy8

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
3732	《倉頡平台2022》.exe
3732	《倉頡平台2022》.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\《倉頡平台2022》.exe
"C:\Users\Admin\AppData\Local\Temp\《倉頡平台2022》.exe"
1⤵
- Loads dropped DLL
PID:3732

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsb3D59.tmp\LangDLL.dll

Filesize
5KB

MD5
014a3be4a7c1ccb217916dbf4f222bd1

SHA1
9b4c41eb0e84886beb5591d8357155e27f9c68ed

SHA256
09acfc5ee34a1dfa1af3a9d34f00c3b1327b56641feebd536e13752349c08ac8

SHA512
0f3d1bf548e29a136150b699665a3f22c6ea2821701737363fa2920b51c391d735f1eae92dea8af655e7d07304bd3d06e4aff3f5a82fa22bcf5d1690013eb922

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb3D59.tmp\nsDialogs.dll

Filesize
9KB

MD5
48f3e7860e1de2b4e63ec744a5e9582a

SHA1
420c64d802a637c75a53efc8f748e1aede3d6dc6

SHA256
6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156

SHA512
28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583

Download Submit