Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
29-08-2024 14:08
General
-
Target
997C SP程序(1.0.0.16)更新包/设计文件更改/YH-NIS/yhserver/yhserver.exe
-
Size
184KB
-
MD5
e1939fa3b7925a3282f80aff41f8ab80
-
SHA1
9059d9484015f197ebf3e3327ac109f3d5e13605
-
SHA256
6340ad01d6a1e1b970114632c1cff4769ce2dc55267f04fc04b0c00fed2e6437
-
SHA512
65c7fa37a41361dcdb28be52659c046214f2785c851fcacd855cecbfc019ab0b58b4aaf1f48fd19e93e6f6ee17c747b08035b54a26a740e3fb1580f29c295466
-
SSDEEP
3072:9npXvjQTo8tGLCstaNMao6Ze3KVNZGItrF0QWngBY:hpXvjQTo8tGFamagfO5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\997C SP程序(1.0.0.16)更新包\设计文件更改\YH-NIS\yhserver\yhserver.exe"C:\Users\Admin\AppData\Local\Temp\997C SP程序(1.0.0.16)更新包\设计文件更改\YH-NIS\yhserver\yhserver.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
208KB
-
Filesize
32KB
-
Filesize
56KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB