General
- Target 1bf6558c3caee3f24cd42422e40ec3e9723b18b2c396990573a3bef2e7b0cb25
- Size 409KB
- Sample260709-bmx3jsbs7n
- SHA256 1bf6558c3caee3f24cd42422e40ec3e9723b18b2c396990573a3bef2e7b0cb25
- MD5 3815dbdd8fefe7242c281bbb5d188b93
- SHA1 e947bcc68e4f3d7baf15d4255a723483a5b7c191
- SHA512 88e80a956d43cd7386bdfc9d261bd0add215876eaa17f97bc417e3515241e71f24e2120027ce08cf855da7b153cb658721e186e88d85298ff589d3f7206a67c3
- SSDEEP 12288:HkuQ1X8O1dUhktXaXM0sddiwJ0I/znU0vi65Ive51h2sd:EuQT1dUhktK80K/ZbUR6Ce1h2E
- TLSH T1BB9423210578916D2C8B71B16A72816EB73B390F5ABD327D1527C2A57883EB13D23D47
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SSCOM串口调试助手_5.13.1.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
SSCOM串口调试助手_5.13.1.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
中华网软件站.url
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
中华网软件站.url
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target SSCOM串口调试助手_5.13.1.exe
- Size 440KB
- SHA256 51ea245a3d07436a86a4449b2791c1f37fa60e181dd128e8d7dd79cc1ad836ce
- MD5 049efc5c0dce5e91628ff1c7d3b746e4
- SHA1 710bd212454513d3bb6655a84484e2edcb15aaa0
- SHA512 93e840df5787fe94da0d634839b49dd0b7a2fed3d39276cbf8e598d67a7d6bbe006b1ead38b191b04ad137fadecdca1ef1f339ccd6dfc0f0a935ed9062ac0810
- SSDEEP 12288:sSJY0XkO1dUPkhraXMusddiwJ0K/znU07ms65Ive40E4:sSJYS1dUPkhG8uK/BbU07ms6Cd4
- TLSH T1A8A40110D67C0CAEC8FE2536563E6D52F2C687288D271389357ECF147683984E752EAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 中华网软件站.url
- Size 70B
- SHA256 edc2ba08516a2b30dae0cfaae0e9de2f2947d4281fc265f1bb3b724766aa7853
- MD5 d338da21a079671e72a0ce49a7e9e93e
- SHA1 1e47433f5e377f948a12a77de43799dfb898e520
- SHA512 90a752eab3f8ac37b943e49f29c9a1e69b40dcac3bb0d0b36ab9df351aa62ceab6d266725108f417a44aa2c09830afaeb07a8c74669536380e38053e031ca0f4
- TLSH T1BEA02223030AF0AFBA83808C0022CC00EC033280CA8BC8CCC288CB2008C20308E8E300
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.