73682de66ad607e0b8ec594d0e89153150a1614060477fc126007ab22cfd3b53 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
24/12/2024, 10:01 UTC

Sharing

Report Analysis Logs

General

Target

һ֪ͨ/һ֪ͨ.exe
Size

2.1MB
MD5

6d41ec7580f5a61cce0b324488167833
SHA1

4ed600b0f470c86094793360376b2a9e556b519e
SHA256

5273fbd5d1271be01021a83ed3f832738dd5ee20401b0e24aaa3da882e8f3058
SHA512

25ca11e10f8a96c85bf3eadf082f576a023fe9126b417b18c0dd8241137933b51437c00f76f3e14db1f61f2103112394daf7733e9d2cb5c21c72591ee8bdf3b4
SSDEEP

24576:KO3gFc/j41MbKbkCSA6LqZsE31n8vdPRN3e6tTQ775:3gUINbkCSA6LqGE3187NuZ775

Score

1^/10

Malware Config

Signatures

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\һ֪ͨ\һ֪ͨ.exe
"C:\Users\Admin\AppData\Local\Temp\һ֪ͨ\һ֪ͨ.exe"
1⤵
PID:1972

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads