Analysis

  • max time kernel
    36s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2022, 14:47

General

  • Target

    Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)/App/ProcessLasso/Insights.exe

  • Size

    674KB

  • MD5

    317e41ba38f2cd84a9565e1c18f38c08

  • SHA1

    eca7ecccd195e2ff396bb841ae267651376a675c

  • SHA256

    5e85a22ff7acbf6685d41371b7551faa50ff5449826e6f57f55f547d8824c74b

  • SHA512

    4aa209a6bf2dc26421064758e33e9febf40374c9d2b8f8a862ec1c812d42d9fe2c6b53c4a41b042ebfa1b72e2144ccafb0c74f59440ffd9059851bfcdb4fab32

  • SSDEEP

    12288:Er/J2+4S1OOjeeQK1qBh9c64YFsAaaXVewsqA3AiQhq7ioITIUfR7KKGtFt:7zsqAwiUq7uJAtFt

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)\App\ProcessLasso\Insights.exe
    "C:\Users\Admin\AppData\Local\Temp\Process Lasso 11.1.1.26 #soft8 病毒 0 (111.10.14)\App\ProcessLasso\Insights.exe"
    1⤵
    • Checks processor information in registry
    PID:916

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/916-54-0x0000000076091000-0x0000000076093000-memory.dmp

    Filesize

    8KB