54fc27864211f75a83460de5faea593fa6fcde0254020057287d5b35d8724a03

Submit
Reports

Overview

overview

Static

static

汇博计�...ll.exe

windows7-x64

汇博计�...ll.exe

windows10-2004-x64

汇博计�...ry.msi

windows7-x64

汇博计�...ry.msi

windows10-2004-x64

汇博计�...gr.dll

windows7-x64

汇博计�...gr.dll

windows10-2004-x64

汇博计�...gr.dll

windows7-x64

汇博计�...gr.dll

windows10-2004-x64

汇博计�...gr.dll

windows7-x64

汇博计�...gr.dll

windows10-2004-x64

汇博计�...OP.exe

windows7-x64

汇博计�...OP.exe

windows10-2004-x64

汇博计�...ry.chm

windows7-x64

汇博计�...ry.chm

windows10-2004-x64

汇博计�...up.exe

windows7-x64

汇博计�...up.exe

windows10-2004-x64

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14-09-2024 10:21

Sharing

Copy URL

Twitter E-mail

Static task

static1

aspackv2

2 signatures

Behavioral task

behavioral1

Sample

汇博计件工资(2005-03-16-16-02)/Common/UninstallPgm/Uninstall.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

汇博计件工资(2005-03-16-16-02)/Common/UninstallPgm/Uninstall.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

汇博计件工资(2005-03-16-16-02)/Console/Msi/Hyper_CSalary.msi

Resource

win7-20240903-en

aspackv2 discovery persistence privilege_escalation

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral4

Sample

汇博计件工资(2005-03-16-16-02)/Console/Msi/Hyper_CSalary.msi

Resource

win10v2004-20240802-en

aspackv2 discovery persistence privilege_escalation

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral5

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/Dlls/Component/GBMgr.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/Dlls/Component/GBMgr.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/Dlls/Component/PSMgr.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/Dlls/Component/PSMgr.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/Dlls/Component/SMMgr.dll

Resource

win7-20240708-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/Dlls/Component/SMMgr.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/HYPER_DESKTOP.exe

Resource

win7-20240729-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/HYPER_DESKTOP.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/Help/Hyper_CSalary.chm

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

汇博计件工资(2005-03-16-16-02)/Desktop/Help/Hyper_CSalary.chm

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

汇博计件工资(2005-03-16-16-02)/Setup.exe

Resource

win7-20240708-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

汇博计件工资(2005-03-16-16-02)/Setup.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

汇博计件工资(2005-03-16-16-02)/Desktop/Help/Hyper_CSalary.chm
Size

427KB
MD5

2321fdb183339cc9f6e79f9546fcc1b2
SHA1

abb0f8909ab22b9b0d6d8bf078b279ea162d8185
SHA256

1f15843cb4733204abc094c442cdc49553473a0bc549687f4ad5ab187ca894df
SHA512

a13f64825f1597064a56473f04d01c8ebba1de182fce59bce781082ec7bce01142ebddd6743520eedf4374a03f231be9682ade46f49167d01fd108c30f711017
SSDEEP

12288:wRsOWsdjzTC5fwz58rQo6J4GwN6sH6pQzGMY:V+NTCiKEEfN8MY

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\汇博计件工资(2005-03-16-16-02)\Desktop\Help\Hyper_CSalary.chm
1⤵
PID:2852

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads