Analysis
- max time kernel
149s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
21/04/2026, 04:36
General
- Target 供应商平台-结算款付款申请录屏--202604201709-supplier.corp.kuaishou.exe
- Size 5.0MB
- Sample260421-e8nb1shx3k
- SHA256 32d71a8a9343624e2a41d9b468f8796ef4d45f06afce4b7e27ffd2da77394ce6
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\供应商平台-结算款付款申请录屏--202604201709-supplier.corp.kuaishou.exe"C:\Users\Admin\AppData\Local\Temp\供应商平台-结算款付款申请录屏--202604201709-supplier.corp.kuaishou.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/616-0-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-1-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-12-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-11-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-13-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-10-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-14-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-17-0x000001A758B90000-0x000001A758D31000-memory.dmp
memory/616-19-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-20-0x000001A758720000-0x000001A758B89000-memory.dmp
memory/616-21-0x000001A758720000-0x000001A758B89000-memory.dmp