Overview

overview

7

Static

static

3

2年自动...df.lnk

windows7-x64

3

2年自动...df.lnk

windows10-2004-x64

7

__MACOS__/.../2.pdf

windows7-x64

3

__MACOS__/.../2.pdf

windows10-2004-x64

3

__MACOS__/...se.dll

windows7-x64

1

__MACOS__/...se.dll

windows10-2004-x64

1

__MACOS__/...iz.dll

windows7-x64

1

__MACOS__/...iz.dll

windows10-2004-x64

1

__MACOS__/...lp.dll

windows7-x64

1

__MACOS__/...lp.dll

windows10-2004-x64

1

__MACOS__/...re.dll

windows7-x64

1

__MACOS__/...re.dll

windows10-2004-x64

1

__MACOS__/...40.dll

windows7-x64

1

__MACOS__/...40.dll

windows10-2004-x64

1

__MACOS__/...up.exe

windows7-x64

1

__MACOS__/...up.exe

windows10-2004-x64

5

__MACOS__/...40.dll

windows7-x64

1

__MACOS__/...40.dll

windows10-2004-x64

1

__MACOS__/..._1.dll

windows7-x64

1

__MACOS__/..._1.dll

windows10-2004-x64

1

__MACOS__/...pi.dll

windows7-x64

1

__MACOS__/...pi.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8eb6945907c07f04bcfd3d70dde85c2c6adafad1f5a11008df67882a5220f767.iso

  • Size

    7.2MB

  • Sample

    240819-lp6sksxare

  • MD5

    25b29b4eb94fbf2dbfe6df6e10ecbc8f

  • SHA1

    35dd386b9e6654ccfce394b23712a743ed59d802

  • SHA256

    8eb6945907c07f04bcfd3d70dde85c2c6adafad1f5a11008df67882a5220f767

  • SHA512

    b0be68287099ba75e370348b685d993cdfb3bae7bf77f87f8df0078296c3620035c2b9bcac38ddeff1044ee8ed2dc7abc036baa50f059559c5da85d3d5572615

  • SSDEEP

    98304:sIz4yyL8j9/sAmguSBuSBNb4Z7dBIYs7hrhb1JtKTKK4KKDyK5FZ1EEEEmEEE1Ed:sIcyOWEAVuwuwNbYZqYs7/Hpj/

Score
7/10
discovery

Malware Config

Targets

    • Target

      2年自动驾驶产品经理-孙静个人简历.pdf.lnk

    • Size

      1KB

    • MD5

      81825aa0279d8b0f0adf016a7ec1a222

    • SHA1

      2297f1677c9b4249f53f9171bdebedb11dc11d26

    • SHA256

      930aa3163b8c50dd5acb614d003f163253bac604b3ddf0368f9cee2504dd56f6

    • SHA512

      1b044a88bec5317ce6041d3456fd216ebaa6f24acf1b98ebbea2b42d11a9a87c422c5eacf6335766685cedf23e8d5632569b76a92f58c08e25dd77a8fa4cda2e

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/2.pdf

    • Size

      46KB

    • MD5

      30a1322dc9fbca10e24645dc66f67505

    • SHA1

      6d31c766e8016e8ed31b80f5988afa12aeeb90e6

    • SHA256

      34b9cb28a8da599ccc136a22a8d7c1c754b28f60f0a9171141996d829a172288

    • SHA512

      60d99c2e635d90d89cc72660852e44befae0e3ce46093a6e30b55568f6f57fc0c81f1413b87b00ac234279437c3de79e72beebf8e6b047aa5eee1c601a03df99

    • SSDEEP

      768:aZiirtDOzHTZvNIZwGLKvR7AXoU8fjrj581orjrjrjrjrjrjrjgrjrjrjrjrjrA2:UnrUzHNCyGWaaf5+offfffffgfffffky

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/base.dll

    • Size

      1.3MB

    • MD5

      e05280b05eaa57f4e910f5fe72f988b9

    • SHA1

      fd2298aceb62d7170d49f356cc057a48a5024a3d

    • SHA256

      e07037507ac0a310159ebf5f3eaa59483677d037a447c3f1830a50ce36b63782

    • SHA512

      abe58f5e8fbdbf3c6f863ca5026852c0f3a0dafca99bd1b56a43d51dc9091c9dba7d7400c923be8320540f37a2d3d45a8bebce5f6ffb6599bd2e731ee9268b28

    • SSDEEP

      24576:MklsPNgacuD+rY3TMyXZrQ01JTP2p20nZBRWL5KbX:5sP5BSrjyXi01JTPa2s2eX

    Score
    1/10
    behavioral5behavioral6

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/filter_installer_biz.dll

    • Size

      145KB

    • MD5

      ad506341f31064d8f09b6d49f91fdb38

    • SHA1

      fbb1414ebbad2590a020fe95582fef797021fa3f

    • SHA256

      c871ddcf9e9f3b4ab3e30c374175cfc90cee1c07ee927a95b89adc62c08aa3bd

    • SHA512

      3ca2e2712f530527bd589e5a9cdf9eac664aac9cf91118f97a864837d904cf26f599e9b078260d8de07add59db82e3c6306ca57a0a27a0e69b149fe3f1375999

    • SSDEEP

      3072:qDohdy/QdfrdTa6r4TkUXfdenqgjt0BNPZ/Tpj:qMO/2a6r4Tkyd0pOBNhpj

    Score
    1/10
    behavioral7behavioral8

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/help.dll

    • Size

      125KB

    • MD5

      066b14b6a795a758bce107b5f3576d58

    • SHA1

      42e3934856329ed58b28106ef3a69609b4fb8271

    • SHA256

      46d3eef767d35b7e04eeefafb6787e5dec4ed413c9548c4d7e27c18cfe8c6b06

    • SHA512

      461b68a1c0c8772d41f37b3fb38a8090cd7bc2c0e13544dd713161385cdd5020e506afd480d63a3b468630445a0036579a8bec8f9c9f6422b1531767baa1b0b5

    • SSDEEP

      3072:Wferm6Yo4IepsJnCSfWmTBfqP1QrFpNXj3lb:WfeytIeulCSjTBiP1Q5pNJb

    Score
    1/10
    behavioral10behavioral9

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/ipc_core.dll

    • Size

      1.6MB

    • MD5

      c1627423b5a38bd537fdae512d8d78a2

    • SHA1

      59656dbfe2ab0e96a10c44212fca9bdf0ac2dec2

    • SHA256

      a94b89c7ff7926ccead39defc57fb4c750d1a6f87e7c340a960bf79da30b297e

    • SHA512

      e08cd4a0ff0a22fcc9bdbaf20e02769b874bcf4960ca35eccb4ac0bc97f33ff446b7d04a08c0293ca270f5b97c27993cfcba1c0691c1a994be0dff4fb29ce92d

    • SSDEEP

      49152:ZAc57sG0h4r8Jzm/XuPTSAyYmC25SA1oKrsg+SBsg+SBNb4Z7d+:vj9/sAmguSBuSBNb4Z7d+

    Score
    1/10
    behavioral11behavioral12

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/msvcp140.dll

    • Size

      558KB

    • MD5

      85cbf842a5ae09287fcd243491dd8007

    • SHA1

      b897c3ac1a8d0db1b774ea9495ded805c7900317

    • SHA256

      bf15eb3503876a04d18f9c2bda8ed795012940d387943189f8eea43cdeb78ec4

    • SHA512

      939ea7c9a0f7ca4c9fcf0dfd3f9b1aa972bf2b1cfdf1aff417da1c60c15381db66a09fc76e9aac4a079d0801584edd46cd08e319305822b986c4db5bbc12e6ac

    • SSDEEP

      12288:y/Wn7JnU0QUgqtLe1fqSKnqEXG6IOaaal7wC/QaDWxncycIW6zuyLQEKZm+jWody:0N59IW6zuAQEKZm+jWodEEYt

    Score
    1/10
    behavioral13behavioral14

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/setup.exe

    • Size

      1.6MB

    • MD5

      9ad19cd4d5170d8f683be92c2475a7d2

    • SHA1

      ae3da7737a28196c487df427837ffe69a99d504e

    • SHA256

      4d99945e1fe48c83eefd6418442a53c233b0126b4751dd1466547a143acb61e9

    • SHA512

      e1482ecf6a6515d9f3fea1185c34c8341a8e81a3aeb1421804293e613564b77259ac164408e41c4af6c98c3b9e651251d44c8645256fd903d027f201b224d123

    • SSDEEP

      49152:W7vsj28BKFdgZP5vrhbA/8JtKTKK4KKDyK5FZ1EEEEmEEE1EEEEEEEEEEElKK1KX:Cs7hrhb1JtKTKK4KKDyK5FZ1EEEEmEEm

    Score
    5/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral15behavioral16

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/vcruntime140.dll

    • Size

      100KB

    • MD5

      a1cae131e18ffd5037b98617708ebd78

    • SHA1

      906de2dd02aff9dfff38635d2752013b297726ce

    • SHA256

      18097cfe4c9ab8d5268b2257e9728cd147d0c075473d0585bdbf482d88810c33

    • SHA512

      608a1c7dde8f8e7fc046dfda7e8581b2281871c98c2ed367f0aa83f864f668b6a8924abca8b6c8ec938f1d9937ed811e416c00bdc90e571e8dd80af9fd276152

    • SSDEEP

      1536:yqHLG4SsAzAvadZw+1Hcx8uIYNUzUoHA4decbK/zJNY7g7RNxh:yqrfZ+jPYNzoHA4decbK/FNYcV1

    Score
    1/10
    behavioral17behavioral18

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/vcruntime140_1.dll

    • Size

      42KB

    • MD5

      eccb03a6e0065535ec3b26ed393e262f

    • SHA1

      14a39c0f41332f159a7ea363b420109366aa44ef

    • SHA256

      a76ae57922bfde0dbfb6d7923c75ea8c8c8c6d4d5d09189ad574c98a8ada855a

    • SHA512

      92312b7a244fd2da3d165ba8c33b907882ad9f1a1383d07f9054dc47d430d38b11f35640e9f8be1ad86fe7a67b5f6d5a1b10c6414a4d060c29338f30ae29c668

    • SSDEEP

      768:+Cm5KhUcwrHY/ntTxT6ov07baYi+Yi3BhUAMxkETh:lmHc16oeba7+7nyxfh

    Score
    1/10
    behavioral19behavioral20

    • Target

      __MACOS__/__MACOS__/__MACOS__/__MACOS__/__MACOS__/zlibwapi.dll

    • Size

      1.6MB

    • MD5

      6ec11ede3d071077bb96b8e092010c12

    • SHA1

      6fe0fc0b550795ee71172e7ea66e48795ce76bc2

    • SHA256

      b069555dc7aa3dc7c32c9181af73f595fb34cda0032348bff36c35f32934e915

    • SHA512

      84670845acd849579d63346ad0f43f7dc791bf78856aac243ba82b2ed11adc9335284b5dc8f1b0bd4d9b364d0af07e95f7272cdcd791103bfb8cc4f6673bcd13

    • SSDEEP

      12288:ePONV1AoxWr6Nk3GQyY0LjHWZYzpOqJAFaed5S1NUXdR/Fx1MJl96shjngXkZtnO:ePfoxdjaNaqzI9t9+hpw8cZ2F

    Score
    3/10
    behavioral21behavioral22

MITRE ATT&CK Enterprise v15

Tasks