6afbd251b227c166e1b6c02e002fa8e23084a46367270a25b9460896da28eba7 | Triage

Analysis

max time kernel
171s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2022 07:08

Sharing

Report Analysis Logs

General

Target

大飞破解版/一键启动.exe
Size

3.9MB
MD5

6f5d22c868cb66606b78926f3d0969b1
SHA1

1457dea770fa3038f76a8d161582f0ff29c7be0e
SHA256

67a8097b6b2754334e667d69e381e79f4cab5a25cd708679c58bcd50754f8de2
SHA512

6c4aad38b3cdc3741fd8e18828b90156ee1f65e9fa59d679bc84d84020d0bcf0001bc6daf413dff65272f5ca3372b024bb5945a6c2f8929a9c98f9fcba04ab29
SSDEEP

98304:NBVZB/g2p6FYskEhipqdwkLQHHhsSYt8d7+94qoa+N/:336+skCfsKSOo+93G

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

一键启动.exe

pid process

4244 一键启动.exe
4244 一键启动.exe
4244 一键启动.exe
4244 一键启动.exe

C:\Users\Admin\AppData\Local\Temp\大飞破解版\一键启动.exe
"C:\Users\Admin\AppData\Local\Temp\大飞破解版\一键启动.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...