Analysis
-
max time kernel
42s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
27/11/2022, 03:50
General
-
Target
LOL英雄联盟多多无限视距辅助v1.0.exe
-
Size
1.1MB
-
MD5
a7f9a1f6ebbf9fe478682542a3e9d4c5
-
SHA1
bae782eec5a5913c84984c63da7f96b3db25cf80
-
SHA256
40ea9d4379630319ae5818c0a5ccddffd70a54263ffe59ef44dd84e4d00e5e77
-
SHA512
5c427a365ebde014d1d36ea1db18e7423077a782f42d399e9ad762c4ff2ee3ec3e760f2a12ae41f12221eb2784412e2f5ef5853e6aa77d7d1d2a8cf5d5118035
-
SSDEEP
24576:joAEOMCq4W8Lx5nvXnJ56Df2Hvaq9oMCw0eF9VVC3bd:7qCLzvWDKmEfr0R
Score
8/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LOL英雄联盟多多无限视距辅助v1.0.exe"C:\Users\Admin\AppData\Local\Temp\LOL英雄联盟多多无限视距辅助v1.0.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
1.8MB
-
Filesize
252KB
-
Filesize
1.8MB