Analysis
- max time kernel
149s - max time network
97s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
21/04/2026, 04:36
General
- Target 供应商平台-结算款付款申请录屏--202604201709-supplier.corp.kuaishou.exe
- Size 5.0MB
- Sample260421-e8nb1shx3k
- SHA256 32d71a8a9343624e2a41d9b468f8796ef4d45f06afce4b7e27ffd2da77394ce6
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\供应商平台-结算款付款申请录屏--202604201709-supplier.corp.kuaishou.exe"C:\Users\Admin\AppData\Local\Temp\供应商平台-结算款付款申请录屏--202604201709-supplier.corp.kuaishou.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3340-0-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-1-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-12-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-13-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-11-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-10-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-14-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-17-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-18-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp
memory/3340-19-0x000002BB5F840000-0x000002BB5FCA9000-memory.dmp