Analysis
-
max time kernel
117s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
25-11-2022 21:22
General
-
Target
傳奇守護者免费版1.8.9/detection/tempj/jx.exe
-
Size
688KB
-
MD5
77a1139843a33ac7ae469e4048d6186b
-
SHA1
e18f5488701b73796903a751596e03869974c5fe
-
SHA256
d52c8301f09895484e2771149ed024cb52ac70c0742f717c76f5f7079c675d7c
-
SHA512
2208883f919ab02451ef12bf101f0a0b9f00f48fd590ff5ee80454619f561059fb6af9eae83adb3ac71f7fbaf77a785e6f703398f876305c92e0f6c4134306cf
-
SSDEEP
6144:TcXjzqjtlL8dcWzu2gB+5Ycp/nqYQsssbmTzps5idMDmH06Z2nQeOg0pPsS2:TcT+WSWzu2QIXEBs5KH0bnQeOg
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\傳奇守護者免费版1.8.9\detection\tempj\jx.exe"C:\Users\Admin\AppData\Local\Temp\傳奇守護者免费版1.8.9\detection\tempj\jx.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB