General
- Target 八月份总账单报表.exe
- Size 18.7MB
- Sample260916-ny27vszdkc
- SHA256 8152d51a72dde734c0e17832263a8884070848a88707731c5e674caae62bcce8
- MD5 d8c48b948c8b4d6ca10e8cd5b210dee9
- SHA1 d72f5c7468f4f8941f46972dcddfca8bae1ed9d1
- SHA512 0373a134915af67b2032ff93fec7162f66a2f0c884295ab53a4e85f2bc1b094cee2240b9374fc88c16a30bea301db70dd683af5e939bfdb2167a05c7cd526fc1
- SSDEEP 393216:EvaLKEValfsHCMcCqaDL1IsBB3ztrTA+MtG4cvxkLp8x:ZSfsHFJLisrFDVyLm
- TLSH T1BA170213B289653AD4AB1A3A5C3FE2445D3FBA203A168D576BF40D5C8F39640BD2B743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
八月份总账单报表.exe
Resource
win11-20260911-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target 八月份总账单报表.exe
- Size 18.7MB
- SHA256 8152d51a72dde734c0e17832263a8884070848a88707731c5e674caae62bcce8
- MD5 d8c48b948c8b4d6ca10e8cd5b210dee9
- SHA1 d72f5c7468f4f8941f46972dcddfca8bae1ed9d1
- SHA512 0373a134915af67b2032ff93fec7162f66a2f0c884295ab53a4e85f2bc1b094cee2240b9374fc88c16a30bea301db70dd683af5e939bfdb2167a05c7cd526fc1
- SSDEEP 393216:EvaLKEValfsHCMcCqaDL1IsBB3ztrTA+MtG4cvxkLp8x:ZSfsHFJLisrFDVyLm
- TLSH T1BA170213B289653AD4AB1A3A5C3FE2445D3FBA203A168D576BF40D5C8F39640BD2B743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Outbound SSH connection to public host
SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.