Overview

overview

7

Static

static

1

个人简�...dM.doc

windows10-2004-x64

1

个人简�...dM.doc

windows11-ltsc_2024-x64

1

个人简�...iO.doc

windows10-2004-x64

1

个人简�...iO.doc

windows11-ltsc_2024-x64

1

个人简�...pG.doc

windows10-2004-x64

1

个人简�...pG.doc

windows11-ltsc_2024-x64

1

个人简�...xX.doc

windows10-2004-x64

1

个人简�...xX.doc

windows11-ltsc_2024-x64

1

个人简�...gb.doc

windows10-2004-x64

1

个人简�...gb.doc

windows11-ltsc_2024-x64

1

个人简�...�.docx

windows10-2004-x64

1

个人简�...�.docx

windows11-ltsc_2024-x64

1

个人简�...cx.lnk

windows10-2004-x64

7

个人简�...cx.lnk

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    18082026_1553_26052026_个人简历-黄伟发-武汉大学硕士-个人简历-黄伟发-武汉大学硕士.docx.lnk.rar
  • Size 1.5MB
  • Sample260818-tbwdpaaa88
  • SHA256 466a448bc1a84a949c19e6f0708880dcc2aaa11cb665fc5c76fce14a28043ff9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutionpersistenceransomware

Malware Config

Targets

    • Target
      个人简历+黄伟发+武汉大学硕士/L#v_h/IxiZMPreCsehdM.doc
    • Size 111KB
    • SHA256 ab578b373d9bb2bfe35102da12eba05ec83650c8de4ccc0fe6963c8ecd530a24
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      个人简历+黄伟发+武汉大学硕士/L#v_h/LyYLBBzudiO.doc
    • Size 161KB
    • SHA256 7a3b2bcab55f340203638fdb6af2c9ed2a7ee99f025c205b3219fd91fcb4a811
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      个人简历+黄伟发+武汉大学硕士/L#v_h/bJwaRwpG.doc
    • Size 38KB
    • SHA256 48c2b108c57459e7e8a61a7fad560c3ea4a193c1b8c9e535790752fd66093f74
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      个人简历+黄伟发+武汉大学硕士/L#v_h/eKmMGixX.doc
    • Size 48B
    • SHA256 cc36eb25769c923abf92ffe05d0596ee4ec822ff13cbb6f63ed91417e1dcf4f5
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral7behavioral8
    • Target
      个人简历+黄伟发+武汉大学硕士/L#v_h/hLcyvVGniVgb.doc
    • Size 7KB
    • SHA256 98755481151f1805ede7266fc3a78c297fdb7dea9e21e871fc4120ca4e7d32fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      个人简历+黄伟发+武汉大学硕士/L#v_h/个人简历+黄伟发+武汉大学硕士.docx
    • Size 1.3MB
    • SHA256 75f04aaea80c798bea0e3a85bd46ef4158a562501a1d5981578cf82ebd1c4dca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    persistenceransomware
    behavioral11behavioral12
    • Target
      个人简历+黄伟发+武汉大学硕士/个人简历+黄伟发+武汉大学硕士.docx.lnk
    • Size 1KB
    • SHA256 9e5005fd9dadd8486bbe89318fc840380840314dedfa2bb8ad5db19b9ea300b0
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    discoveryexecutionpersistenceransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks