Overview

overview

9

Static

static

8

三国魂�...00.exe

windows7-x64

1

三国魂�...00.exe

windows10-2004-x64

1

三国魂�...ar.dll

windows7-x64

3

三国魂�...ar.dll

windows10-2004-x64

3

三国魂�...te.exe

windows7-x64

8

三国魂�...te.exe

windows10-2004-x64

8

三国魂�....2.exe

windows7-x64

6

三国魂�....2.exe

windows10-2004-x64

6

三国魂�...��.exe

windows7-x64

8

三国魂�...��.exe

windows10-2004-x64

9

三国魂�...ml.url

windows7-x64

1

三国魂�...ml.url

windows10-2004-x64

1

Analysis

  • max time kernel
    40s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    26-11-2022 06:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    三国魂战魂/basedb/查ID所在的文件000.exe

  • Size

    568KB

  • MD5

    998256969af808db93c4827a4d93bc51

  • SHA1

    dc8abd8ddc122a18fc20eb4da181aa0c1df8bc22

  • SHA256

    c706451afce4091a6e879e39e7cc9890df64465e0050ac3b605b9ec4bf037fc3

  • SHA512

    1be89974f526f235a96050cd1a48c31e94346d2e51ddf135aee7828ea6c0d738e08a75f296d4e10e7126208ca40480fa8bc7cafcfdc22f6fa4ed870dcc8e0de9

  • SSDEEP

    6144:HPbRbOnjwJf8PuxF55HtxmS2DkHzLeQ0b4WNYiHcScT1lS3xfJkC7g49BzN9DBrB:H1bOUfjxz5HtxN2Qv5v3jS3XJTxF

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\三国魂战魂\basedb\查ID所在的文件000.exe
    "C:\Users\Admin\AppData\Local\Temp\三国魂战魂\basedb\查ID所在的文件000.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/832-54-0x0000000075041000-0x0000000075043000-memory.dmp
    Filesize

    8KB

    Download