Analysis
-
max time kernel
37s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
24-05-2022 17:41
General
-
Target
范伟打天下招财宝辅助/招财宝辅助.exe
-
Size
1.7MB
-
MD5
9cae8990cec8fff426d4555e1ceda109
-
SHA1
5b23b743f57ff137bd8f04dcdb44235ad354169b
-
SHA256
7312da64e917caab82def3a5c324b8a2c4ca613676971585ad8f50094ea57cd9
-
SHA512
0a14cb69b7916df5c275bc4aebae870221412fbd61407abff3ce6e67e32969497cac5ff269677121047c78c5093a9877507831417245e25f0b09f15346c2ff8f
Score
10/10
Malware Config
Signatures
-
Ramnit
Ramnit is a versatile family that holds viruses, worms, and Trojans.
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\范伟打天下招财宝辅助\招财宝辅助.exe"C:\Users\Admin\AppData\Local\Temp\范伟打天下招财宝辅助\招财宝辅助.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
456KB
-
Filesize
456KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB