Overview

overview

10

Static

static

10

挖掘鸡7...gr.exe

windows7-x64

10

挖掘鸡7...gr.exe

windows10-2004-x64

10

河源下�...cn.url

windows7-x64

1

河源下�...cn.url

windows10-2004-x64

1

淘宝热卖.url

windows7-x64

1

淘宝热卖.url

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    06-12-2024 20:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    淘宝热卖.url

  • Size

    380B

  • MD5

    cbe73651c7aa955d4a5a303fbe025918

  • SHA1

    0da66a5b0861279f7d9e05c67356680e21081e3a

  • SHA256

    c42e9bb76bbc2f6e436c52d1890731c105c27a95056b1e4a7e5729d8e30feab5

  • SHA512

    8ac4fa53371ecb694f55f24410db1e8bb834654135bc7e005f4ff577ab53de668cb0480cfda16769d1d09be0e5e5c1a479473a5f29df1d8bc372f988b31a811c

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\rundll32.exe
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\淘宝热卖.url
    1⤵
      PID:3068

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3068-0-0x00000000002F0000-0x00000000002F1000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3068-1-0x00000000002F0000-0x00000000002F1000-memory.dmp

      Filesize

      4KB

      Download