Overview

overview

7

Static

static

1

多多软�...��.url

windows10-2004-x64

7

多多软�...��.url

windows11-ltsc_2024-x64

7

资源/apo...up.exe

windows10-2004-x64

3

资源/apo...up.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    220c8b5b25ff2305a63e8f0e9529fa9c0676e0acb35e6820ff4f7533972a14d3
  • Size 1.0MB
  • Sample261110-wlk2tact61
  • SHA256 220c8b5b25ff2305a63e8f0e9529fa9c0676e0acb35e6820ff4f7533972a14d3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target
      多多软件站-提供绿色软件和热门单机游戏下载.url
    • Size 151B
    • SHA256 8ce5067162b095958f82aae58b375228d6f0e987ee643729f6c860c74a2be055
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    defense_evasion

    • Uses Rundll32 to proxy-execute a payload

      Rundll32 is a signed Windows utility that executes code inside DLLs. It can load specific system libraries to run malicious executables or scripts.

      defense_evasion
    behavioral1behavioral2
    • Target
      资源/apowermirror-setup.exe
    • Size 1.9MB
    • SHA256 a05263b8df7764c6ceb033aa81bc0e1c28d953f23b20eefc7fe8c8f56f1a8192
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks