Overview

overview

10

Static

static

3

xshell软...cx.lnk

windows7-x64

3

xshell软...cx.lnk

windows10-2004-x64

10

xshell软...cs.vbs

windows7-x64

10

xshell软...cs.vbs

windows10-2004-x64

10

xshell软...mc.dll

windows7-x64

10

xshell软...mc.dll

windows10-2004-x64

10

xshell软....xlsx

windows7-x64

1

xshell软....xlsx

windows10-2004-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    4s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-04-2024 14:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    xshell软件排查结果反馈/xshell软件排查结果反馈.docx.lnk

  • Size

    1KB

  • MD5

    dcf3d59f84590bf4195d3e42d1f229be

  • SHA1

    f219a6fbb04f2513e109e22269f839121c072fc7

  • SHA256

    82bf7ba9e947c1dc93032278c52f32b20a026cd05f3195ef08cf9a31be75a5b2

  • SHA512

    724d3225699af65b645b2c0ed7e8116f5a392c77018acbe2da0901cc76b4341546bf8f629325916fa6980e8054775c7160c6abce58c6c9637e927a2ece769a5c

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\xshell软件排查结果反馈\xshell软件排查结果反馈.docx.lnk
    1⤵
      PID:996
      • C:\Windows\explorer.exe
        "C:\Windows\explorer.exe" ".\其他材料\.__MACOSX__\.__MACOS__\._MACOS_\cs.vbs"
        2⤵
          PID:2588
      • C:\Windows\explorer.exe
        C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
        1⤵
          PID:2564
          • C:\Windows\System32\WScript.exe
            "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\xshell软件排查结果反馈\其他材料\.__MACOSX__\.__MACOS__\._MACOS_\cs.vbs"
            2⤵
              PID:2504
              • C:\Windows\System32\rundll32.exe
                "C:\Windows\System32\rundll32.exe" C:\Users\Admin\AppData\Local\Temp\xshell软件排查结果反馈\其他材料\.__MACOSX__\.__MACOS__\._MACOS_\mc.dll,Test
                3⤵
                  PID:2456

            Network

            MITRE ATT&CK Matrix ATT&CK v13

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/2456-36-0x0000000001E50000-0x0000000001E91000-memory.dmp
              Filesize

              260KB

              Download