Analysis
-
max time kernel
21s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
27-11-2022 06:27
General
-
Target
小乱造梦辅助V5.4/小乱造梦辅助V5.4.exe
-
Size
2.8MB
-
MD5
3ca2f79ef04f730c69a4fd106598be59
-
SHA1
e29345266442fd00f56ea092fcb7a99e4975b551
-
SHA256
4086e89d41cfd3e4642c7693a7ebc240fe734aef39e4ccb50e34efb1b3408875
-
SHA512
9654e1626e79432b227e6e20f4d5ab48c195c829b32ab84c71277c50b8b19cb40f30ffb14bcffa03d475f6221a44d69e7e915d60c21225e74265deb57fa3b2c5
-
SSDEEP
49152:zarJITeht/w+9sMB7iPkNQqGddcVqx5CoxeRuSRNbe1SJ:mrmTenQ2nN1PkxcuSRNbM
Score
8/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\小乱造梦辅助V5.4\小乱造梦辅助V5.4.exe"C:\Users\Admin\AppData\Local\Temp\小乱造梦辅助V5.4\小乱造梦辅助V5.4.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
5.0MB
-
Filesize
5.0MB