Overview

overview

7

Static

static

7

readme.url

windows7-x64

6

readme.url

windows10-2004-x64

3

下载王w...om.url

windows7-x64

1

下载王w...om.url

windows10-2004-x64

1

易语言�...EL.dll

windows7-x64

7

易语言�...EL.dll

windows10-2004-x64

7

易语言�...xt.dll

windows7-x64

1

易语言�...xt.dll

windows10-2004-x64

1

易语言�...t2.dll

windows7-x64

1

易语言�...t2.dll

windows10-2004-x64

1

易语言�...et.dll

windows7-x64

1

易语言�...et.dll

windows10-2004-x64

1

易语言�...ln.dll

windows7-x64

1

易语言�...ln.dll

windows10-2004-x64

1

易语言�...p3.dll

windows7-x64

1

易语言�...p3.dll

windows10-2004-x64

1

易语言�...ec.dll

windows7-x64

1

易语言�...ec.dll

windows10-2004-x64

1

易语言�....0.exe

windows7-x64

1

易语言�....0.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    66s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-04-2024 09:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    易语言邮箱客户端/邮箱V1.0.exe

  • Size

    1.2MB

  • MD5

    ae82ffc116fc7a208df8ca50797e631e

  • SHA1

    c0024e7f533a33d251ac78871d372978bb91fe59

  • SHA256

    d42b93e0b3910573bc6a8082911e5ee2aa7d44ea9dc642ad0e0c15b39b9420d8

  • SHA512

    8d7cb236a63cf239b39498ccdd576599ba60eca1ed8dda0801c186f2425ecdf80eb5c9d42288d572b47a78a19a5ff3be95d746af40538ff5be9279287e9427a9

  • SSDEEP

    12288:SDDPdoT14w97k5ZC+kWgl/KSuB/xr8KEVLYSg5PfnsDWTuLV+15P+8V+gV+fY3Za:ASJV5QZCoe/jNLiHkRmE8XV1D5FY

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\易语言邮箱客户端\邮箱V1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\易语言邮箱客户端\邮箱V1.0.exe"
    1⤵
      PID:1104

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1104-0-0x0000000000400000-0x000000000053E000-memory.dmp
      Filesize

      1.2MB

      Download