General
- Target d4dd3753d87a5c1d14d4e7c114eb0f5b4215eed2a5176007510f8b15ffbff7f6
- Size 4.5MB
- Sample260527-labnwsb17w
- SHA256 d4dd3753d87a5c1d14d4e7c114eb0f5b4215eed2a5176007510f8b15ffbff7f6
- MD5 cc001b6606a1696ea1fe547cb879e642
- SHA1 51978d2c1a0a035c51b0a5e621f391652573d794
- SHA512 096a4f7f3c58cdc23a1721b357208f1029f89e704fa986ab926ac997222feeaddc93253f388ce273d17cd18f660466df898439a4218c2c01d71d6c8d0c31f489
- SSDEEP 98304:cRMcpVTZCUhyahQEXyaf+M8IANgrp5p7W/V9FMKkmAnuGWfYVpZBHp:RsZvzZiaf+MN1rx74VXnYNWfYdBHp
- TLSH T1532633CDE70A6C04DB6F654647E0095FBF9A66EB6393373845E104F858470ECAFE8268
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
【薪資調整通知】/AISafeSDK64.dll
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
【薪資調整通知】/AISafeSDK64.dll
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
【薪資調整通知】/【薪資調整通知】.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
【薪資調整通知】/【薪資調整通知】.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 【薪資調整通知】/AISafeSDK64.dll
- Size 4.4MB
- SHA256 08f8a286b6cd9ab0291e3b0e5f5d2fdce22024acc167634de0ad83bcb47a5747
- MD5 80cfb32b29b00d05415b4990da151da7
- SHA1 d652abe1a678dab8f418fe31c47002f2a40a6a3e
- SHA512 ec50e17ddf486b7218cfb5467761ed0f16e29f53af4ec19865fa350bd8dd535fec9aa3dbfe79ff8510e6539f67b21e998cba36e5fc658ca2dccc7150cb33e76f
- SSDEEP 98304:3zcsiSENObk/iHnUbdnePIbCs80H45tDyILBlMY/VSMsyXcfo+ocyRPA6s:viFsbk+gEWSi45cqwZyF+LyRPLs
- TLSH T1452633E4F4F86B32C89FC67572A34A8DBF953F3A8BAD85512B092819CC73B540935316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target 【薪資調整通知】/【薪資調整通知】.exe
- Size 356KB
- SHA256 8aaba749e9444b3b49ccc8d248415240a305dbd28c37e3f0314d9c9ac33626e5
- MD5 2dbfa346a66e96f5460b7cd41c956c4f
- SHA1 90450f82d092146a719b014093c5b1e22744162f
- SHA512 f022797e615c30ebef4e91a97f1252fcadc30698e6c43e1ecec2e546adcfcdcb524ab29b012c89a626a3c14f1caea5ab71635f4393f341852137dd631a915c9f
- SSDEEP 6144:P4E7URPVNgpQTbApn2OruvqlF1oehkys6Ui73bG1vihkxvnGrYoh46Bn3OnvSkxX:PcRdaQXAh2vqXM6v8o0vdeD+
- TLSH T1C3746B19F7A954F5E477823DC8928546E6B27C160B708BDF23A4431E2F372D19D3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Suspicious use of NtSetInformationThreadHideFromDebugger