Overview

overview

6

Static

static

3

xlbbqmrj/C...ar.dll

windows7-x64

1

xlbbqmrj/C...ar.dll

windows10-2004-x64

1

xlbbqmrj/RCX12A.exe

windows7-x64

6

xlbbqmrj/RCX12A.exe

windows10-2004-x64

1

xlbbqmrj/cncnv.dll

windows7-x64

1

xlbbqmrj/cncnv.dll

windows10-2004-x64

1

xlbbqmrj/dp1.dll

windows7-x64

1

xlbbqmrj/dp1.dll

windows10-2004-x64

3

xlbbqmrj/eAPI.dll

windows7-x64

1

xlbbqmrj/eAPI.dll

windows10-2004-x64

1

xlbbqmrj/iext.dll

windows7-x64

1

xlbbqmrj/iext.dll

windows10-2004-x64

1

xlbbqmrj/iext2.dll

windows7-x64

1

xlbbqmrj/iext2.dll

windows10-2004-x64

1

xlbbqmrj/internet.dll

windows7-x64

1

xlbbqmrj/internet.dll

windows10-2004-x64

1

xlbbqmrj/kernel32.dll

windows7-x64

1

xlbbqmrj/kernel32.dll

windows10-2004-x64

1

xlbbqmrj/krnln.dll

windows7-x64

1

xlbbqmrj/krnln.dll

windows10-2004-x64

1

xlbbqmrj/shell.dll

windows7-x64

1

xlbbqmrj/shell.dll

windows10-2004-x64

1

xlbbqmrj/spec.dll

windows7-x64

1

xlbbqmrj/spec.dll

windows10-2004-x64

1

xlbbqmrj/wininet.dll

windows7-x64

1

xlbbqmrj/wininet.dll

windows10-2004-x64

1

xlbbqmrj/�...��.exe

windows7-x64

6

xlbbqmrj/�...��.exe

windows10-2004-x64

5

xlbbqmrj/�...��.doc

windows7-x64

4

xlbbqmrj/�...��.doc

windows10-2004-x64

1

xlbbqmrj/�...zp.exe

windows7-x64

1

xlbbqmrj/�...zp.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-05-2024 10:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    xlbbqmrj/响亮宝宝取名软件.zp.exe

  • Size

    1.4MB

  • MD5

    da742ebfa28f383f4872006b3468b29f

  • SHA1

    df72f071a42cb01e981524e6a18f3785d9081e90

  • SHA256

    31f8bfac897eaeace51733014331f7711b54c3afc7a23877cedfe54a1767f3f6

  • SHA512

    246775c9533f32025cf6b4b51385f0a15d0c876236e194334b862d23e7c6a164857dbdfadc084f1ce61d0c94bdb43f453298c7fba31a663509b65bcbc38158b5

  • SSDEEP

    24576:0gMiBu+yBakEplKHmcQXuWd/oNH0WeUb7R3Prbx7DtoBzToU3OZYApb4aUsqMXyW:0CBFlKGVuWWNH0+FiBzT9GdprqMyOVV

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\xlbbqmrj\响亮宝宝取名软件.zp.exe
    "C:\Users\Admin\AppData\Local\Temp\xlbbqmrj\响亮宝宝取名软件.zp.exe"
    1⤵
      PID:1252

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1252-0-0x0000000000400000-0x00000000006F6000-memory.dmp

      Filesize

      3.0MB

      Download

    • memory/1252-1-0x00000000007A0000-0x00000000007E0000-memory.dmp

      Filesize

      256KB

      Download

    • memory/1252-2-0x00000000007E0000-0x00000000007E1000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1252-3-0x0000000000400000-0x00000000006F6000-memory.dmp

      Filesize

      3.0MB

      Download

    • memory/1252-5-0x00000000007A0000-0x00000000007E0000-memory.dmp

      Filesize

      256KB

      Download