Overview

overview

6

Static

static

orochi_z_tc.exe

windows7-x64

1

orochi_z_tc.exe

windows10-2004-x64

6

精彩库�...om.url

windows7-x64

1

精彩库�...om.url

windows10-2004-x64

1

Analysis

  • max time kernel
    14s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    24-11-2022 07:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    orochi_z_tc.exe

  • Size

    1.2MB

  • MD5

    e23af09fed6f9f9f4ec56745c0efaf8f

  • SHA1

    d46ee9d475cba5a2fbac953c6cf912ff3ddb92b0

  • SHA256

    42d20add87d1953f29779cf38bcba3e6f8efe43c8f39668ff6e0de5d88de9e0d

  • SHA512

    e7ed47575ae7bfe0570e0c3a17b9194fbc10a820647f0c63ed2a92879c76208a5475e142e8d1cbfc5edd4764162b7e92c7665c8d932d1f72ba96a79fd479ef3a

  • SSDEEP

    24576:2WnjPwxVCwvO6q0yj+pyy0+OGZnOX91hYgGlVc+SWtoRRmW9GBSLur6:2ojIxVTmtxj+AGROnhBS++SWtoRR70Sd

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\orochi_z_tc.exe
    "C:\Users\Admin\AppData\Local\Temp\orochi_z_tc.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1632-54-0x0000000075BE1000-0x0000000075BE3000-memory.dmp
    Filesize

    8KB

    Download
  • memory/1632-55-0x0000000000400000-0x000000000154D000-memory.dmp
    Filesize

    17.3MB

    Download
  • memory/1632-57-0x0000000000400000-0x000000000154D000-memory.dmp
    Filesize

    17.3MB

    Download
  • memory/1632-58-0x0000000000400000-0x000000000154D000-memory.dmp
    Filesize

    17.3MB

    Download