General

  • Target
    八月份总账单报表.exe
  • Size 18.7MB
  • Sample260916-ny27vszdkc
  • SHA256 8152d51a72dde734c0e17832263a8884070848a88707731c5e674caae62bcce8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      八月份总账单报表.exe
    • Size 18.7MB
    • SHA256 8152d51a72dde734c0e17832263a8884070848a88707731c5e674caae62bcce8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Outbound SSH connection to public host

      SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.

MITRE ATT&CK Enterprise v16

Tasks