Analysis
-
max time kernel
130s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25-11-2022 22:06
General
-
Target
雷霆之怒夜涩辅助V2.3/edison.exe
-
Size
3.8MB
-
MD5
518f36099e6526c41e44ccfdf2665a99
-
SHA1
acb3288e67fd5381ef6d89ba6031a623c535c481
-
SHA256
e14eaf02998acd6c3ae092c1f6a62377e64add5ed410096df693388694cb19c4
-
SHA512
e1977eff04ea4fcfc19a119f37cf165b945662cf858e2cb918ec9f8716e354657c545ac2fc8f3e96a239978589d1ff88e6571db47020d7ca8e4d127618bcf478
-
SSDEEP
98304:hUlRr8eWMeymfqEbW5UAGAD2jMjtDTu+jrrc+:hO81Me6SrAMMZfu2H
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 31 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\雷霆之怒夜涩辅助V2.3\edison.exe"C:\Users\Admin\AppData\Local\Temp\雷霆之怒夜涩辅助V2.3\edison.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\雷霆之怒夜涩辅助V2.3\edison.exe"C:\Users\Admin\AppData\Local\Temp\雷霆之怒夜涩辅助V2.3\edison.exe"2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.1MB
-
Filesize
5.1MB
-
Filesize
2.1MB
-
Filesize
1.6MB
-
Filesize
488KB
-
Filesize
1.6MB
-
Filesize
5.1MB
-
Filesize
5.1MB
-
Filesize
5.1MB
-
Filesize
5.1MB
-
Filesize
5.1MB
-
Filesize
5.1MB
-
Filesize
5.1MB
-
Filesize
5.1MB