Analysis
-
max time kernel
91s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
24-09-2022 14:13
Static task
static1
Behavioral task
behavioral1
Sample
桌面透视汉化版Vitrite/VitriDLL.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
桌面透视汉化版Vitrite/VitriDLL.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
桌面透视汉化版Vitrite/Vitrite主程序.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
桌面透视汉化版Vitrite/Vitrite主程序.exe
Resource
win10v2004-20220812-en
General
-
Target
桌面透视汉化版Vitrite/Vitrite主程序.exe
-
Size
25KB
-
MD5
6f31adc724b50f6c05f3a63e2ab3bd4d
-
SHA1
4eda2cf456bc5014a8ec17e8b025f0cdab847437
-
SHA256
21bb5e18de74a37886979d507005ab091501990a97d702078d4d18f9582e514a
-
SHA512
f3133dff77ad668735e27cf42e2844b879f36e5fd1796f111c62a58a87bfe16f52bbec0aaacaf982ac81946ae2bb8f21d6fa0cd07c1d62b8208b38505bfedf7b
-
SSDEEP
384:7Lpeh9ZncHFoBAC+zOaR6bVF8GsLgBY5bHBAqAQeMSKug9+cDWcbK:7NeyUAC+KTRCGsEBoEEoI+cDWcbK
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4308 Vitrite主程序.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4308 Vitrite主程序.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4308 Vitrite主程序.exe