Analysis
-
max time kernel
174s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
24-11-2022 21:15
General
-
Target
风云江湖v2.0.exe
-
Size
1.2MB
-
MD5
92edd3c48dc6f601607e98028ce753fb
-
SHA1
d1a38ebf9989550c3c17b1a4a51b66d5263ef57c
-
SHA256
03380ba189e805fe4d71a899e25a24e7e4d96c2b819c1136db5e5a53a8601a82
-
SHA512
5662ef267f46c32768482836950abac5859b864c8d90912bab20d9ae799b38d25d62b5225736f1d13138315d1fa9674435a1a208bda91f985929d1ad6f2aa3a2
-
SSDEEP
24576:ZCZZtdalG46v2VsPM1eVpc1Ej4SsMsEJ:BlG46OVs2efc1Ej4SD
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\风云江湖v2.0.exe"C:\Users\Admin\AppData\Local\Temp\风云江湖v2.0.exe"1⤵
- Enumerates connected drives
- Suspicious use of SetWindowsHookEx