Overview

overview

6

Static

static

1

软件安�....9.msi

windows7-x64

6

软件安�....9.msi

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    469b95ceccd34f53ab8497f61c25359b8c306224b521029fb4ae03b87ea1dc24

  • Size

    10.9MB

  • Sample

    241119-p56z3awlaw

  • MD5

    e56a81afe5cd11c9a92c460f980c8ec4

  • SHA1

    494a70769a80fe5477896a035d1ddc89ffd16087

  • SHA256

    469b95ceccd34f53ab8497f61c25359b8c306224b521029fb4ae03b87ea1dc24

  • SHA512

    6f4211bb4ec398875ec82b7a7ea7980b7cd339bf6fbaf5b180bba691dda1d1ac34671dec70e60eada17196ae1067206fa0d4fd7a08036e43e9ac7397ca511946

  • SSDEEP

    196608:HnJT/7aO9pWvNGWnjssAUQUipwA42AGrvXPigon3YwiKovNS0V9SxkUq99V:H1TeN3n1HA2vIwiB80bSxkp/

Score
6/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      软件安装包u3.6.9.msi

    • Size

      12.3MB

    • MD5

      c69c56b4d13e4200eed11f6fdefaf1df

    • SHA1

      9924957cfb023a6d237527aee31e5ba69ae29def

    • SHA256

      b7c249a4b4b94dd02bed0f4c878ced4e2285f366b0d01584ac49092ace76d610

    • SHA512

      e093c0cce241c0066906e6fee8c22f3a45302d4eb11a3aa1713676ed2202349fb0efb8801cc7cb940311622ba3733c94738e5a390455d55f1ad579bdf9915d25

    • SSDEEP

      393216:x49ccZUpj4f7eUFVg9UwfegD8ZVCrnRji:GKJpEfqqVg9dfegDCVCrnRG

    Score
    6/10
    persistenceprivilege_escalation

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks