ed8faa9f23c3a9fd69f6e743ee0d90e46d82ccbf72bbdbd8c2d8c1fbdcfa0ca5 | Triage

Analysis

max time kernel
10s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 15:33

Sharing

Report Analysis Logs

General

Target

长久中变.exe
Size

3.0MB
MD5

9915ce8e92563194f335c7158b9b9a50
SHA1

3cd9a6bbdeb6ab402bd13707bb8bc9df2dead63f
SHA256

6f9fab8db93f42404553c8b5515c250a95f1a7d6974ec13189b217ef82cb7723
SHA512

3ceeee36ff5723a9de8f6e32b6a818f6c1b3f475199018f35de73f4a087320e27411367e8cd8fdbbcee61857a503c64f129490749633bd83d0582560214a2ee1
SSDEEP

98304:jp4Enyny6nfslB78LkKpOOB+kJN14lVKll:t4jy6nap6pOOvJcDk

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

长久中变.exe

pid process

1980 长久中变.exe
1980 长久中变.exe

C:\Users\Admin\AppData\Local\Temp\长久中变.exe
"C:\Users\Admin\AppData\Local\Temp\长久中变.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1980-54-0x0000000075F61000-0x0000000075F63000-memory.dmp

Filesize
8KB

Download
memory/1980-55-0x0000000000400000-0x000000000080E000-memory.dmp

Filesize
4.1MB

Download
memory/1980-56-0x0000000000400000-0x000000000080E000-memory.dmp

Filesize
4.1MB

Download