Overview
overview
8Static
static
8GameHardware.exe
windows7_x64
8GameHardware.exe
windows10-2004_x64
8IP地址修改器.exe
windows7_x64
3IP地址修改器.exe
windows10-2004_x64
3VMwarehardware.exe
windows7_x64
8VMwarehardware.exe
windows10-2004_x64
8hardware.exe
windows7_x64
8hardware.exe
windows10-2004_x64
8一键修....exe
windows7_x64
7一键修....exe
windows10-2004_x64
7分区序....exe
windows7_x64
1分区序....exe
windows10-2004_x64
1网卡MAC....exe
windows7_x64
1网卡MAC....exe
windows10-2004_x64
1Analysis
-
max time kernel
29s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
20-05-2022 04:56
Static task
static1
Behavioral task
behavioral1
Sample
GameHardware.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
GameHardware.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
IP地址修改器.exe
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
IP地址修改器.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
VMwarehardware.exe
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
VMwarehardware.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
hardware.exe
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
hardware.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral9
Sample
一键修改系统信息.exe
Resource
win7-20220414-en
Behavioral task
behavioral10
Sample
一键修改系统信息.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral11
Sample
分区序列号修改工具.exe
Resource
win7-20220414-en
Behavioral task
behavioral12
Sample
分区序列号修改工具.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral13
Sample
网卡MAC地址修改工具.exe
Resource
win7-20220414-en
Behavioral task
behavioral14
Sample
网卡MAC地址修改工具.exe
Resource
win10v2004-20220414-en
General
-
Target
分区序列号修改工具.exe
-
Size
1.6MB
-
MD5
99c050ee7f450fd6d0ed540b8ef8cc68
-
SHA1
17224a94dfe9138ac32fa130769c146428816b2c
-
SHA256
f9e32b5632bfbf591c8f8a078cb61ada43a1799d3fa16ceda08e707a0533b7ff
-
SHA512
86eaa30f1c41b2aa114483f44c497df58254716905491457b67343627a14fa71e33178a0922355f74e44fc3bf25cecd53f0186596234c8338684c620841b29aa
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 4 IoCs
Processes:
分区序列号修改工具.exepid process 964 分区序列号修改工具.exe 964 分区序列号修改工具.exe 964 分区序列号修改工具.exe 964 分区序列号修改工具.exe -
Suspicious use of SendNotifyMessage 4 IoCs
Processes:
分区序列号修改工具.exepid process 964 分区序列号修改工具.exe 964 分区序列号修改工具.exe 964 分区序列号修改工具.exe 964 分区序列号修改工具.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
分区序列号修改工具.exepid process 964 分区序列号修改工具.exe 964 分区序列号修改工具.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/964-54-0x00000000753B1000-0x00000000753B3000-memory.dmpFilesize
8KB