Analysis
-
max time kernel
30s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
27-11-2022 06:29
Static task
static1
Behavioral task
behavioral1
Sample
'Xiaotao/20141123/ȡVip_11.7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
'Xiaotao/20141123/ȡVip_11.7.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
'Xiaotao/ȡ_עϵͳ.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
'Xiaotao/ȡ_עϵͳ.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
'Xiaotao/ȸʹ˵.chm
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
'Xiaotao/ȸʹ˵.chm
Resource
win10v2004-20221111-en
General
-
Target
'Xiaotao/ȡ_עϵͳ.exe
-
Size
1.5MB
-
MD5
2ce9eedba814bf9daf4be4092891a807
-
SHA1
474fe3b37c5d86a51010a5aedb54c44f06f2ecc1
-
SHA256
13781f17f83e3e5c1428071be24e6eb68a345c41788a6b7daa98b22cacc213b5
-
SHA512
cb66876e41b9937b40ed120556a8cb753cecf1edb1e96ecaeccfbf54184b2c79e44f5ddf739f155edea721fb45f272889a517cfcbf2819ff6ac632004ac8df5d
-
SSDEEP
24576:UAjSkNB5GxAF+EGAU4zvmjoxMKROMNapbCFaq7BbLq21nxlmjFl2AcRlgeLrLCOi:U3kfEEm4z4APRZ7aq7BPq21x4jFlLcj8
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 960 ȡ_עϵͳ.exe 960 ȡ_עϵͳ.exe