Overview

overview

1

Static

static

巅峰辅助.exe

windows7-x64

1

巅峰辅助.exe

windows10-2004-x64

1

清理工具0606.exe

windows7-x64

1

清理工具0606.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    43s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 18:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    清理工具0606.exe

  • Size

    580KB

  • MD5

    6a464af963fbc481990804edc41abfcb

  • SHA1

    3c12ea0b1a2d222ea50f05f3b749e452f1c3d0dc

  • SHA256

    a34640bf65816153d86bc86df95adde49f5f2f5fc3f2607eaa10b05883ba9006

  • SHA512

    c3d36e9724b37d4468758c5267a99fa37e4fba646ded927aced31e89b93e90ee571608dca7d7f0ba027ab3a0e0207844cea9e553a981c2de976db17ffd19f04b

  • SSDEEP

    6144:sgZLsV15hKD7ToTXQlTC+veiWGwc/tKMIcWzrUZdbtlvpZZEDTVbj5vY:sqLo5SETXQluKDEVgKIZdLvpaU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\清理工具0606.exe
    "C:\Users\Admin\AppData\Local\Temp\清理工具0606.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1708-54-0x0000000075111000-0x0000000075113000-memory.dmp

    Filesize

    8KB

    Download