Analysis
-
max time kernel
88s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
26/09/2022, 15:13
General
-
Target
steam明星志愿3自动过场小工具（快捷键F9开启关闭）.exe
-
Size
1.2MB
-
MD5
da8aeadd5ba22dad6e229342e379e60f
-
SHA1
3dad556a36912753748baa6f3f4c5950943aedf8
-
SHA256
0d35379596005f023f7d11f5d05308551eb531e08a2355fc08de4f1666ea781b
-
SHA512
df28dc4b5b5b63aa5e58d2a40a38d267fec3f9d6116136cb87d1b76d84e58c8bed2f9f9408987efe947e3b76565d6bec4ffd918e0d68286d83373d3fad417fc1
-
SSDEEP
24576:SD7Xr5my0DPP23Iy5YAmRW6B8If0s83I4eqowSwa1X9tqY7Jxiq8O:SD7Xroy0DPP23Iy5YAmw6B8If0F3Iwoj
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\steam明星志愿3自动过场小工具（快捷键F9开启关闭）.exe"C:\Users\Admin\AppData\Local\Temp\steam明星志愿3自动过场小工具（快捷键F9开启关闭）.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage