Analysis
-
max time kernel
48s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
25-11-2022 21:22
General
-
Target
傳奇守護者免费版1.8.9/detection/tempj/yx.exe
-
Size
696KB
-
MD5
864478fef94d7bcbc6b07ff0dfda067e
-
SHA1
4adf59b5f3db36c9632c2f01ed1f6bde0e6dee7d
-
SHA256
5afa1bb68db83e1f560deefa22759a38f3c2e095e99e1fb9a8963c8c76a6f298
-
SHA512
d74c1b6d952c25d920c2f28ad7969e8d6c6b7a5938507ecdc2d3161cfada91a8ea45f812d5b8a7baf729b3444ed61b8f037228e11b95c5fb021dddbcf0f99061
-
SSDEEP
6144:4nvnnnluhSThKSXnXeaXrh+oxmFwkroTYnSScJAVwSTQgmT8onb/tRZJ:4nfnlZtbnzXrh+kGngqwSVeh
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\傳奇守護者免费版1.8.9\detection\tempj\yx.exe"C:\Users\Admin\AppData\Local\Temp\傳奇守護者免费版1.8.9\detection\tempj\yx.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/700-54-0x0000000076381000-0x0000000076383000-memory.dmpFilesize
8KB