Analysis
-
max time kernel
37s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
26-11-2022 11:42
General
-
Target
LOLxzs/英雄联盟小助手vip版.exe
-
Size
3.1MB
-
MD5
29d894257943aeaa27024d3889c785eb
-
SHA1
ac22bc0a937745f07986e8de6ba9224ff7c9aaad
-
SHA256
f11b7bcfca3778cc410517d10fd27c794eaeb56cdc6e42cf2beda510749c3bfb
-
SHA512
6da439c256ef97045661ce8d86d8b531d7d1d1210f427118badaf2b1e869a7ced02a52ea1cc2ac97db40c7824c58fdf3dd1061e2161c28873b317e8b655ca6ce
-
SSDEEP
49152:Nk28Z4186Gev/hwTrH5Icqe3vU9b5gDyvVWnotrd6kQwk9xHJaZP0mW/PVTyyALH:pULDJU92DTKdsHwZP0mW/1yys
Score
8/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LOLxzs\英雄联盟小助手vip版.exe"C:\Users\Admin\AppData\Local\Temp\LOLxzs\英雄联盟小助手vip版.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
6.3MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
6.3MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
6.3MB