Analysis
-
max time kernel
91s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
31-10-2022 22:21
General
-
Target
歌曲搜索程序1/歌曲搜索.exe
-
Size
41KB
-
MD5
ad31e8465c637cb7ed8b09704fd4aa18
-
SHA1
0c7fbb4d09cba433556069cf0b2c749a77e14775
-
SHA256
56c7ed865ddeaa37ce5efef504def72cd752451133c7aff9fa89d924cce4b087
-
SHA512
553256ce5120cbef3725bf30518af75903f3a215d046c330be25f1efc723a29f67f300b9c99bbf80bc88e9e6ca1966adc176d2fabf690b8d063f1603121cc3f7
-
SSDEEP
768:KkVP/j5PCroBK5lkj5z8Gr2S/K9KpIJpyDh/k4pgZWm+:ptPCrog7kdzViS/K9KpICDtk8g
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 24 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\歌曲搜索程序1\歌曲搜索.exe"C:\Users\Admin\AppData\Local\Temp\歌曲搜索程序1\歌曲搜索.exe"1⤵
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
80KB
-
Filesize
352KB