Analysis

  • max time kernel
    150s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-11-2022 04:54

General

  • Target

    急速辅助免费版1223/前锋加速器1.6/前锋加速器1.6_se.exe

  • Size

    1.8MB

  • MD5

    e184c47d8f1d0ecceeacf2adac3fc7f1

  • SHA1

    0a4170fdf173eb5cc79451a1e7b4204d5d193786

  • SHA256

    40b4902d7f75a1255d6db7e3ca651bd330bf2fc3c06aa6020f408a7e54bb074b

  • SHA512

    76ed1bd9c745f1c8effdc2a67969ccb949d8ec442fad822019857d11fa816443486665c8f8465cf63f0200b23abda1035246cc8a92bad41d76cee62fbc7339d5

  • SSDEEP

    49152:kPkcOsQNtz32qvLtumPNejafNxVdpPIGjPRX:kNfQn3ntumPwjaf7VdpHRX

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\急速辅助免费版1223\前锋加速器1.6\前锋加速器1.6_se.exe
    "C:\Users\Admin\AppData\Local\Temp\急速辅助免费版1223\前锋加速器1.6\前锋加速器1.6_se.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4496-132-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/4496-133-0x0000000077C10000-0x0000000077DB3000-memory.dmp

    Filesize

    1.6MB

  • memory/4496-134-0x0000000076540000-0x0000000076755000-memory.dmp

    Filesize

    2.1MB

  • memory/4496-136-0x0000000076970000-0x0000000076B10000-memory.dmp

    Filesize

    1.6MB

  • memory/4496-137-0x0000000075FE0000-0x000000007605A000-memory.dmp

    Filesize

    488KB

  • memory/4496-1481-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/4496-1482-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB

  • memory/4496-1483-0x0000000002A80000-0x0000000002B80000-memory.dmp

    Filesize

    1024KB

  • memory/4496-1484-0x0000000000400000-0x0000000000817000-memory.dmp

    Filesize

    4.1MB