Analysis
-
max time kernel
24s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 16:48
Static task
static1
Behavioral task
behavioral1
Sample
pfDesktop.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
pfDesktop.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
绿盟-首页.url
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
绿盟-首页.url
Resource
win10v2004-20220812-en
General
-
Target
pfDesktop.exe
-
Size
1.2MB
-
MD5
1513e22eb6a6d59647c5839d7a746a3f
-
SHA1
9db918516f5e7ca657222eec5a3ddf4f5ec8a355
-
SHA256
2d7961d9857b94014043425f5cbcd5041476ee5b8c2a33efbd10a8aff33323cb
-
SHA512
d59b4086982a3236bec2c981650d559079e1c68512b4d7fcb5490f9124ff986771a8490264bc4ff8ddbe16d654a10ce1f13be24621ca4512acdfb97df9560fd4
-
SSDEEP
24576:d4/6rcrLvbZz2K5p7NXrdeXIKHW2uXwGMN5pzvvBt7kQ:dvrInZz2Ip7bbKHW2uAGMrpFtwQ
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
pfDesktop.exepid process 1352 pfDesktop.exe 1352 pfDesktop.exe