b9ea0745fdb68d9821c794df701ea8ca13bd96c07eb017139ba11f1b4962dd22 | Triage

Analysis

max time kernel
294s
max time network
379s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 09:24

Sharing

Report Analysis Logs

General

Target

二码分解小工具.exe
Size

16KB
MD5

7923032f236b967268751632ab4617f3
SHA1

5422eed9588e2b14d222af7c967816b65bc79c73
SHA256

7680abf32d4a98db6f50a791409817a78e3457aa444506dc955985c4f1ea3b54
SHA512

48eb17d000c19d30356b0c57c56767e87db45d584cacd25b3f0b1f95d4024e89d54bca7cb3556faaaf3098b7be3adef66bcce3a313c35a8bba7aaa8449b982a3
SSDEEP

96:Fv9lC4+m9lCIXCArTwmQtZmxSSE2NiUuhJ89EeeylQtZEa2:19lCW9lkHQXED7qxl0ma

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2512	二码分解小工具.exe

C:\Users\Admin\AppData\Local\Temp\二码分解小工具.exe
"C:\Users\Admin\AppData\Local\Temp\二码分解小工具.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads