Overview

overview

7

Static

static

3

长春长�...md.exe

windows10-2004-x64

3

长春长�...md.exe

windows11-ltsc_2024-x64

3

长春长�...ub.dll

windows10-2004-x64

3

长春长�...ub.dll

windows11-ltsc_2024-x64

3

长春长�...�.docx

windows10-2004-x64

1

长春长�...�.docx

windows11-ltsc_2024-x64

1

长春长�...cx.lnk

windows10-2004-x64

7

长春长�...cx.lnk

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    a692429bf764f3bd86d7fe91e89f2d2fc9e077c574d76e2693323cfdd183bdd2
  • Size 2.2MB
  • Sample260820-m6vmbaytex
  • SHA256 a692429bf764f3bd86d7fe91e89f2d2fc9e077c574d76e2693323cfdd183bdd2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
execution

Malware Config

Targets

    • Target
      长春长生基因药业差旅采购情况说明/1/1/1/DIFxCmd.exe
    • Size 188KB
    • SHA256 3d9f56b0491f810b73fb579a83452b2eb9c6100e8cfb0ba2d03b9764f6b4da75
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      长春长生基因药业差旅采购情况说明/1/1/1/GLHub.dll
    • Size 2.8MB
    • SHA256 41cc545ba0b31ff0b3573fb82035088275d7fa9c1385ffe041b384fa6674c411
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      长春长生基因药业差旅采购情况说明/1/1/1/长春长生基因药业差旅采购情况说明.docx
    • Size 13KB
    • SHA256 aaa0078aa4c1d608db10a954948d88974508de568625c5842c98de9056d47433
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      长春长生基因药业差旅采购情况说明/长春长生基因药业差旅采购情况说明.docx.lnk
    • Size 1KB
    • SHA256 56f9d464754194ae4feae30d6bebb6031559d83b72690070d0bfe0efcce8994d
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks