6f10987abcc18f3b36c6b0cd67a63e1c442c27cb500972661e307208c5f2a2f3 | Triage

Analysis

max time kernel
26s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 16:54

Sharing

Report Analysis Logs

General

Target

燓寂大极品.exe
Size

3.0MB
MD5

22e5709351032895883c41cc50c5625d
SHA1

b5f4186096bbc350e24ca80f25288860f3263997
SHA256

8d95d168275e9a249ee596bfdd4b1d398a0fe396b083c50f434d0b2572bf9ca5
SHA512

0aeb3acc8079ba3b1d779af6ec4e31a1129675bb6f3b3832d2b38b5c147018229ce77db58089b355f7c9fb153c64695e559dac788327cb9d465025fc3bf0b222
SSDEEP

98304:jp4Enyny6nfslB78LkKpOOB+kJN14lV0ul+:t4jy6nap6pOOvJcDE

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

燓寂大极品.exe

pid process

1344 燓寂大极品.exe
1344 燓寂大极品.exe

C:\Users\Admin\AppData\Local\Temp\燓寂大极品.exe
"C:\Users\Admin\AppData\Local\Temp\燓寂大极品.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1344-54-0x0000000075651000-0x0000000075653000-memory.dmp

Filesize
8KB

Download
memory/1344-55-0x0000000000400000-0x000000000080E000-memory.dmp

Filesize
4.1MB

Download
memory/1344-56-0x0000000000400000-0x000000000080E000-memory.dmp

Filesize
4.1MB

Download