Resubmissions
29/09/2022, 07:21
220929-h6yxhsbbcq 128/09/2022, 10:56
220928-m1p5msggej 821/09/2022, 02:36
220921-c32w4sadej 8Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
21/09/2022, 02:36
Static task
static1
Behavioral task
behavioral1
Sample
中文测试.exe
Resource
win10-20220901-en
2 signatures
30 seconds
Behavioral task
behavioral2
Sample
中文测试.exe
Resource
win10v2004-20220812-en
2 signatures
30 seconds
General
-
Target
中文测试.exe
-
Size
595KB
-
MD5
2cbd09b348560e319bfa86584306669f
-
SHA1
67423491538ec13829a30f4e2d272ea4ac51ace4
-
SHA256
ba715e86c6ae86b8096d6c49d90095c4a6b37d56b2a09d09c25b6fea097d3886
-
SHA512
6984cf70b6d775010f322ffacc292c2a0bd8277577affbef3df43198e6bb27250aebc8c6a9d0e4a6c150e54e1030555751775bbf2a86240aaf2be76a26ff1d89
-
SSDEEP
12288:dlSzgKlfsJ0nsKuUwgOxvUEm0dG++xYYsyF5gcMh0ZjGEnOhygAH48gtj6:dozvBs+IpWfWYVF58KxGGg59U
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5016-135-0x00000000008C0000-0x00000000008CB000-memory.dmp upx behavioral2/memory/5016-136-0x00000000008C0000-0x00000000008CB000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5016 中文测试.exe 5016 中文测试.exe