Overview

overview

6

Static

static

3

名单册终端.exe

windows7-x64

1

名单册终端.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    名单册终端.exe

  • Size

    756KB

  • Sample

    240513-ply54sfb56

  • MD5

    87c800dac6fb2709eafd6561f100035a

  • SHA1

    c15667dd8971a61b368f27c2e8a8f22ef7366bbc

  • SHA256

    6f88b6f5f55488c28379f8e18a9ed347534cec25d7ba2ec2d9566bc712a4741d

  • SHA512

    bb279745e0a9434198303b2c010a7bce231e7c0a95e2de1ec8a599a48c03749da2c3d8909ac36024f6ec82cde7a6cdb2a62aefa20b0d4b694b1a85b751b1e95d

  • SSDEEP

    12288:BMR5KNIevOJGIGEMvQ+xC60QM6n7vFSspPsvVe3cuQlrJuTWI1p/:SR5KNIUO5GEiQ+x/M6n7wspOVn9lVuTB

Score
6/10
motwphishing

Malware Config

Targets

    • Target

      名单册终端.exe

    • Size

      756KB

    • MD5

      87c800dac6fb2709eafd6561f100035a

    • SHA1

      c15667dd8971a61b368f27c2e8a8f22ef7366bbc

    • SHA256

      6f88b6f5f55488c28379f8e18a9ed347534cec25d7ba2ec2d9566bc712a4741d

    • SHA512

      bb279745e0a9434198303b2c010a7bce231e7c0a95e2de1ec8a599a48c03749da2c3d8909ac36024f6ec82cde7a6cdb2a62aefa20b0d4b694b1a85b751b1e95d

    • SSDEEP

      12288:BMR5KNIevOJGIGEMvQ+xC60QM6n7vFSspPsvVe3cuQlrJuTWI1p/:SR5KNIUO5GEiQ+x/M6n7wspOVn9lVuTB

    Score
    6/10
    motwphishing

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

      phishingmotw
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks