Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
15-05-2024 05:18
Behavioral task
behavioral1
Sample
ֽ/ByteDance-ʶֲ.word.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ֽ/ByteDance-ʶֲ.word.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
ֽ/PROPSYS.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
ֽ/PROPSYS.dll
Resource
win10v2004-20240426-en
General
-
Target
ֽ/ByteDance-ʶֲ.word.exe
-
Size
245KB
-
MD5
4acc218e13667ca101cab9db29e44a77
-
SHA1
a84bcee7738b86ae41baee4e73d0a8c2a735e0fe
-
SHA256
1ab5183a4d362a358b27a66b3013fcb17486e3d44b018fc1fa2cc2c7ba3f963e
-
SHA512
361eaad250755271d5158c30393e28cdceed54d8756c13a22dde303147ae9a4530c3f9758628d69e43240bc5582056eabf3df6d3672f1dd3f51c109566aec89a
-
SSDEEP
6144:KpfXnqiLZ32RnqlPy0GrN5HTohi9qQuFnwOEm:KpfXnzGRnRrzoY9zOEm
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2204-0-0x0000000071F30000-0x00000000733FB000-memory.dmp detect_ak_stuff
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2204-0-0x0000000071F30000-0x00000000733FB000-memory.dmpFilesize
20.8MB