a7640a94bc8531cf48500b83c28d8359b511674dee08da19081194e979de14db | Triage

Analysis

max time kernel
146s
max time network
154s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 13:46

Sharing

Report Analysis Logs

General

Target

波普先生的企鹅优酷完整版.exe
Size

252KB
MD5

95bd21e090d619be1688fb893db3cea1
SHA1

51ebb2b8e54305ecdff2b700d3091dc103da00e7
SHA256

fd252b6504ee55166c98f403dd12959ef34b9d8834e43e807bd70e717c61b9ac
SHA512

93aaa77eb0d295d7c362bb94bae1a0a570430e5b9a4dfff24cf03477274cb93445cdb4f4f0af72af400ac26eccdbfc392aa7dbf0518dd1d4bcd428c684408589
SSDEEP

3072:Nr9KKtUStQJeWIaidfO5+DHkSu0iyhb3xfBTdWISictNJKsEiuBWdWZ:NQKtUoOeWIai9DzM07nx6ijTaY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

波普先生的企鹅优酷完整版.exe

pid process

752 波普先生的企鹅优酷完整版.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

波普先生的企鹅优酷完整版.exe

pid process

752 波普先生的企鹅优酷完整版.exe

C:\Users\Admin\AppData\Local\Temp\波普先生的企鹅优酷完整版.exe
"C:\Users\Admin\AppData\Local\Temp\波普先生的企鹅优酷完整版.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/752-54-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download