Overview

overview

4

Static

static

3

药品追�...��.exe

windows7-x64

1

药品追�...��.exe

windows10-2004-x64

1

药品追�...��.doc

windows7-x64

4

药品追�...��.doc

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9374cefc586e89a9aa82bbafe8f3b96d28535838411f44f9ba0be854ad71eb5

  • Size

    276KB

  • Sample

    241120-fnnmqa1drh

  • MD5

    4e29801e6bd1cbaeb94a2b7cfb2cc5fb

  • SHA1

    d157780d0ec7e22b86040302df942f07fc25ce4a

  • SHA256

    a9374cefc586e89a9aa82bbafe8f3b96d28535838411f44f9ba0be854ad71eb5

  • SHA512

    f80a77b3ff4e4aeb18694071f9215e6c4628df077b43c45ba1df68b3fc4f3ece52ce93d2d9b732062bb5c424cf2e2d29b5ce64cc8420ad051f9d08dd3ddc6577

  • SSDEEP

    6144:OukBTs1WsZPbjAVSXZpiTBmE+OKYYDmve12XTNCCz8zXvPJoTM7jMIBR:idYW2PwVSXi4ENyqCCYXvh7jrBR

Score
4/10
discovery

Malware Config

Targets

    • Target

      药品追溯上传1120(盘点和库存变更)/国家医保结算清单上传程序.txt

    • Size

      614KB

    • MD5

      0405a24d71297371032a02b73e34bade

    • SHA1

      163dd91bf676159e71e1ea534bceb5f848d50050

    • SHA256

      179e69621a42239413dc2fd3fcde123e82d808f03fd32ba3139ec9aecb344b98

    • SHA512

      a4719add99667a469d226145cc568c0beff0171fbc655890686ce71ea1c653fa2efb4044a5a3c50f5b5fef932e0396775741df623696f19acbd1b58b78b1a037

    • SSDEEP

      12288:k01npRyjlcgH5uek0+r9HoKq3Ba2xICh7aPXLLNfhTjl9:kaRyjlxZuK+r9HoLc2xIXPXLLNfhTjr

    Score
    1/10
    behavioral1behavioral2

    • Target

      药品追溯上传1120(盘点和库存变更)/操作文档_药品追溯.doc

    • Size

      104KB

    • MD5

      90cc1b8c3dcc35d02cc79cb05aa0b274

    • SHA1

      62786dde33bf863e09f20ccff19a14a7f32ed3c0

    • SHA256

      32e98226da14c5f3fb7a350ee6b2bc90f50a1a35c3e51f7af11f89d4e014d0f5

    • SHA512

      93b0cd2386e176da9a2120a223a3642d4ea51ca2352718c7c3fc76714ebbc1344220a5aa9e07563892ca2829487defa0e337783dd6457dc4ff97d4ce1f500122

    • SSDEEP

      3072:CJCsf29Zdp2VEZkYxJnX3zl4sKlQ4oo6MF2oon2nw:YEvp2eZ31PKC4oo6MF2oon2nw

    Score
    4/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks