df34d06f06bbf5226e0753056ec5880dd58d1a4501eb3c5995d1ec6c28eba3e1 | Triage

Analysis

max time kernel
152s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 15:42

Sharing

Report Analysis Logs

General

Target

QQ空间认证代码生成器/QQ空间认证代码生成器.exe
Size

1.4MB
MD5

18de44e6931ff508bab81e26b5ce21ad
SHA1

43fa338c906e266b21e3c1afd1382aec8e152743
SHA256

ecc8d296f97676b6671fdefc4917c7176a365ceff749876ce7bc9af2488ed909
SHA512

f268be9ed99680f6a05b04095ce43c95fb35fadcdedf2c347062bd0943445d959c0174f53111c97d6ccc4cdf73273bb1716bc635ffb9f2412a3a271489a3589c
SSDEEP

24576:EJFjHsIhpn+mieTZaqdiXSp0c02uFG6dAk3HMd:ujz4VeTZaqdwk0c05HGiK

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

QQ空间认证代码生成器.exe

pid process

5116 QQ空间认证代码生成器.exe
5116 QQ空间认证代码生成器.exe

C:\Users\Admin\AppData\Local\Temp\QQ空间认证代码生成器\QQ空间认证代码生成器.exe
"C:\Users\Admin\AppData\Local\Temp\QQ空间认证代码生成器\QQ空间认证代码生成器.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads