Overview

overview

10

Static

static

3

2024po.exe

windows7-x64

4

2024po.exe

windows10-2004-x64

4

Timo.exe

windows7-x64

1

Timo.exe

windows10-2004-x64

10

[D]2024年...��.exe

windows7-x64

1

[D]2024年...��.exe

windows10-2004-x64

1

点击此�...��.exe

windows7-x64

8

点击此�...��.exe

windows10-2004-x64

7

票9254523...��.exe

windows7-x64

1

票9254523...��.exe

windows10-2004-x64

1

考勤异�...��.exe

windows7-x64

1

考勤异�...��.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    129s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-06-2024 15:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    考勤异常信息统计结果查询工具.exe

  • Size

    6.5MB

  • MD5

    33b53d552861ded63f1c39eb195732fa

  • SHA1

    db3eb7f683fc782b1149b35927c03ec039d80ee1

  • SHA256

    2da3ae187b621059a4e9c2be286d79d5b4e3371c3d2a1cdb2f76f7b895aff47e

  • SHA512

    d5016eaab5b64cd185345163556b4373366b6d048bd0d02e849c86fd2d478968c13db3f789c0c1789a20e141d8f17cc941f0a6b37b2676768b57804e101f9c5c

  • SSDEEP

    98304:IGd53n+zkSfHlHLtSEqtoixB0N5RWgz2yI32w6DU:fbjKlrZSlB0QgzioU

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\考勤异常信息统计结果查询工具.exe
    "C:\Users\Admin\AppData\Local\Temp\考勤异常信息统计结果查询工具.exe"
    1⤵
      PID:2240
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4248,i,17325488789339133686,9539570259395798500,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:8
      1⤵
        PID:3396

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads