Overview

overview

7

Static

static

5

内部审�...d.docx

windows10-2004-x64

1

内部审�...d.docx

windows11-ltsc_2024-x64

1

内部审�...40.dll

windows10-2004-x64

1

内部审�...40.dll

windows11-ltsc_2024-x64

1

内部审�...oc.dll

windows10-2004-x64

1

内部审�...oc.dll

windows11-ltsc_2024-x64

1

内部审�...md.exe

windows10-2004-x64

5

内部审�...md.exe

windows11-ltsc_2024-x64

3

内部审�...40.dll

windows10-2004-x64

1

内部审�...40.dll

windows11-ltsc_2024-x64

1

内部审�..._1.dll

windows10-2004-x64

1

内部审�..._1.dll

windows11-ltsc_2024-x64

1

内部审�...rd.doc

windows10-2004-x64

1

内部审�...rd.doc

windows11-ltsc_2024-x64

1

内部审�...cx.lnk

windows10-2004-x64

7

内部审�...cx.lnk

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    e09901c27f68a432b3a1fbda41478f9107cf34b1364ecc9d349a7d196982be04
  • Size 887KB
  • Sample260814-nd9ffasapg
  • SHA256 e09901c27f68a432b3a1fbda41478f9107cf34b1364ecc9d349a7d196982be04
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
execution

Malware Config

Targets

    • Target
      内部审计工作告知通知/.__MACCOSX/.docx/.docx/word.docx
    • Size 36KB
    • SHA256 e9f432a11a6269e318d923f2eb1e80b928acc0d925c02a6b29364753e8f940d8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      内部审计工作告知通知/.__MACCOSX/.docx/.docx/word/msvcp140.dll
    • Size 553KB
    • SHA256 52dd576406494889f1ee614bc47cd40b9de74b2c007257cc6f30ba5a1a75d5ff
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      内部审计工作告知通知/.__MACCOSX/.docx/.docx/word/renderdoc.dll
    • Size 116KB
    • SHA256 35c6d7a3cbb019d136fc4244cafb8a8428e1321ececf7fd57dc71b4a086c9857
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      内部审计工作告知通知/.__MACCOSX/.docx/.docx/word/renderdoccmd.exe
    • Size 562KB
    • SHA256 b12c1138ac19e77c47d84ca786e639f5a0c86a1d0024694560ae6f0c8966214b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral7behavioral8
    • Target
      内部审计工作告知通知/.__MACCOSX/.docx/.docx/word/vcruntime140.dll
    • Size 108KB
    • SHA256 8e28bcbb33a68f1fb362a6bc09e386a3dc13606fc82fd59a8cde916f47c13b10
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      内部审计工作告知通知/.__MACCOSX/.docx/.docx/word/vcruntime140_1.dll
    • Size 39KB
    • SHA256 edbb07dec0d7fec6eaee1c58d5f93f5a967fe94515a2397e63c0816c2b4be1f5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      内部审计工作告知通知/.__MACCOSX/.docx/.docx/word/word.doc
    • Size 615KB
    • SHA256 2493944a983af6b3c0c4b89d7322e628962f0fbbfd6ac3fd5e614c3caa71cdc2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      内部审计工作告知通知/内部审计工作告知通知.docx.lnk
    • Size 816B
    • SHA256 e5978f6b87241541d0f7a2200befc1fb32bf3eb36292134af439340fce6cdbd5
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks