73e20c2df58b66ef399f29fd8c4b9cdfdc712fcdd4586e1c7a267c21c04bb9ef | Triage

Analysis

max time kernel
39s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 16:51

Sharing

Report Analysis Logs

General

Target

杯面.exe
Size

2.1MB
MD5

8bb3aa64819b3ec7343d1d1548e8bc3b
SHA1

e26c956b8195289c03825cf9403e61843f20c79f
SHA256

57c4e648e6e770179aab8069e4a31797792bc89a1a6391dd67b2f1dec353f4c8
SHA512

bfdb91ee998ec3ac955759ae835429a7bb12186b054f925d4719fe60ca0c221c1381a7d6c972ed0c2d4e6eb8ceab7e886fe5556ee50bc90add429cb902dbe164
SSDEEP

49152:STPHmUFOJLPcIWSRcZNxn0eGj3wP3snjsJYNKgT5e:STPHmUFOmVSONSeUa3i8YM2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

杯面.exe

pid process

1228 杯面.exe
1228 杯面.exe

C:\Users\Admin\AppData\Local\Temp\杯面.exe
"C:\Users\Admin\AppData\Local\Temp\杯面.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1228-54-0x0000000075561000-0x0000000075563000-memory.dmp

Filesize
8KB

Download
memory/1228-55-0x0000000000400000-0x0000000000B4B000-memory.dmp

Filesize
7.3MB

Download
memory/1228-56-0x0000000000400000-0x0000000000B4B000-memory.dmp

Filesize
7.3MB

Download
memory/1228-58-0x0000000000400000-0x0000000000B4B000-memory.dmp

Filesize
7.3MB

Download