Analysis
-
max time kernel
147s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2022, 20:36
Static task
static1
Behavioral task
behavioral1
Sample
bkill_kvup_V1.5/必杀客江民无限升V1.5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bkill_kvup_V1.5/必杀客江民无限升V1.5.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
bkill_kvup_V1.5/绿色下载站首页.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
bkill_kvup_V1.5/绿色下载站首页.url
Resource
win10v2004-20220812-en
General
-
Target
bkill_kvup_V1.5/必杀客江民无限升V1.5.exe
-
Size
1.3MB
-
MD5
83b8b7e245e17f0900879d14c4a40bc3
-
SHA1
63e19f44d88d24dbcb7edc2d72f0ab7b883e4b41
-
SHA256
b0c897cc4abb440baded027160f30ec04d851eb35ffc52736d0e1d4c1304e159
-
SHA512
35dcc488c4944750137cd1c5a47d5bd5bb864376fd484cd6b7511fecbd755779fdd266bbeb12ded9596931a0fcce0031f46ccb311f5b29e1c08377e5c1923966
-
SSDEEP
12288:K38634qUUbK49FXP5bIJLn4y/VXWKCCCnCi8NBKv8n3CB40n5Eb:wPUkK49Ff5kF9VX8ZnC/N28nyB405E
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1472 必杀客江民无限升V1.5.exe 1472 必杀客江民无限升V1.5.exe 1472 必杀客江民无限升V1.5.exe