Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
14-03-2024 16:27
Static task
static1
Behavioral task
behavioral1
Sample
23-FlsEngine.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
23-FlsEngine.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
core/23-FlsEngine-Easy-Core.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
core/23-FlsEngine-Easy-Core.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
必看使用说明.xls
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral6
Sample
必看使用说明.xls
Resource
win10v2004-20231215-en
windows10-2004-x64
General
-
Target
core/23-FlsEngine-Easy-Core.dll
-
Size
7.3MB
-
MD5
3e2baa540d3cae029f6d7a447212533b
-
SHA1
0c0a1c66de9e52450085670ea070d531ef65a75e
-
SHA256
5466280f6577c66a01b11dc131e42e34a5868af530cba2e8048c1f7b46467e67
-
SHA512
454ec73b14aa5241425d34c5cab4c3135fa885dce0403d6d288ecdcae9f1c28954be661760bf5373f660ce11333ca1b155d2dd5f83840bfb3e306429ea7e964a
-
SSDEEP
196608:nok+AzcxhIveALGlLHsb+Xu5U5yrx4TO9m5Ze789bV5Ll5y:o0zcbIveARr5r9m5uAl
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe 4568 rundll32.exe