Analysis
-
max time kernel
299s -
max time network
384s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
24-11-2022 15:06
General
-
Target
CS功能版.exe
-
Size
5.3MB
-
MD5
98cee8df77c4b1b4fdabb263facab3af
-
SHA1
f0e2f06205484adbf5f26db4d4ee2dfbc8c47b9d
-
SHA256
3382f1fcba7290d83a5bb014eda5756a0993ffb68195199f2241fbdd0aa91204
-
SHA512
ffac3f36615378ab808e2e1e1729ae19f071b72d56b74d1a393f184a2d798a09409d3faf4d86596f047c2279fd8004bc1d5e34026215635ba53ca4f75e329694
-
SSDEEP
98304:rStP5UfJoSds9oPmyTMmNgva64qvAu959oE8PJBAUZLLloMZ8g8X8nRjOE:rStPmfYoeqMmNQz9zonJV/pN
Score
8/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CS功能版.exe"C:\Users\Admin\AppData\Local\Temp\CS功能版.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2684-132-0x0000000000400000-0x0000000000992000-memory.dmpFilesize
5.6MB
-
memory/2684-133-0x0000000000400000-0x0000000000992000-memory.dmpFilesize
5.6MB
-
memory/2684-134-0x00000000028C0000-0x0000000002932000-memory.dmpFilesize
456KB
-
memory/2684-135-0x00000000028C0000-0x0000000002932000-memory.dmpFilesize
456KB
-
memory/2684-136-0x00000000028C0000-0x0000000002932000-memory.dmpFilesize
456KB