7ad5db6178d3de2392f041b5402e9173bc0803d61e06b534c529bbcb5fa8ad37 | Triage

Sharing

General

Target

金稅五期（电脑版）-uninstall.exe
Size

21.0MB
Sample

241120-gkx8esxkgl
MD5

98ea3184eb9c88f9a8282e54b9b1df9d
SHA1

9ca39e8afaf165879687edba4f9d725945292b33
SHA256

7ad5db6178d3de2392f041b5402e9173bc0803d61e06b534c529bbcb5fa8ad37
SHA512

82a59577369a2c0bd84f2c11c1e88f4d2b1b58e985b07fed0535b7bd1badd85ad7cb3fbc3454b61d9bfcaa0efc08d45fbb5373686e2e567d8d114d78feba888f
SSDEEP

393216:9RbyUI273CAabyUI273CAjLeLfonQH3is0MIb63aL54BTRJsv6tWKFdu9Cd:9RbNIgyAabNIgyAqcSBT

Score

5^/10

Malware Config

Targets

- Target
  
  金稅五期（电脑版）-uninstall.exe
- Size
  
  21.0MB
- MD5
  
  98ea3184eb9c88f9a8282e54b9b1df9d
- SHA1
  
  9ca39e8afaf165879687edba4f9d725945292b33
- SHA256
  
  7ad5db6178d3de2392f041b5402e9173bc0803d61e06b534c529bbcb5fa8ad37
- SHA512
  
  82a59577369a2c0bd84f2c11c1e88f4d2b1b58e985b07fed0535b7bd1badd85ad7cb3fbc3454b61d9bfcaa0efc08d45fbb5373686e2e567d8d114d78feba888f
- SSDEEP
  
  393216:9RbyUI273CAabyUI273CAjLeLfonQH3is0MIb63aL54BTRJsv6tWKFdu9Cd:9RbNIgyAabNIgyAqcSBT
Score

5^/10
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2