Analysis
-
max time kernel
145s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25-11-2022 22:06
General
-
Target
雷霆之怒夜涩辅助V2.3/雷霆之怒夜涩辅助V2.3.exe
-
Size
1.8MB
-
MD5
09be0e9da4098fd10fc3e664db9a6c76
-
SHA1
59e70a5a5a5bfc78a83ccf55ed968ee0d40fc651
-
SHA256
cb7d20ec893bc7f68332a4867b4074650fdf8a250a44926beae4a069e444b0cb
-
SHA512
f69269fa538dc900e7d9579ef8d362b962cc2f6d52af49672ae8206e2741c8b3e4b0cad41b0d43a64e851403da9eeff3a62354083b4108286036579f47833829
-
SSDEEP
24576:g3iFu/RkAgSl+I7CfHhZ/uOHTLXs/nGRMItConG3CgOuKrMA3jIEPn7:gSY/RkdHD8i9nKOuYTl
Score
8/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Modifies Internet Explorer start page 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\雷霆之怒夜涩辅助V2.3\雷霆之怒夜涩辅助V2.3.exe"C:\Users\Admin\AppData\Local\Temp\雷霆之怒夜涩辅助V2.3\雷霆之怒夜涩辅助V2.3.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Modifies Internet Explorer start page
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
2.1MB