Analysis

  • max time kernel
    128s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    27-11-2022 08:41

General

  • Target

    变速精灵2.11免费版/skin/default/SkinEditor1.exe

  • Size

    110KB

  • MD5

    1c15bdda957b8321d974e94acaa26437

  • SHA1

    0de70b680ad339930159da926bc26c7a4be81037

  • SHA256

    d5c4bddebf0af01eb2812dc8ddf71899b70f4863407cbd1721076216bbe49879

  • SHA512

    73b423285867ef96235a7544474885c482c0c9158b9fdfe53954491bb59310ed6eed1f3a4a8aeafaf3ca977bbf1814a4294265bef4772bfce20f705cad51b279

  • SSDEEP

    1536:tNuYdJMMH2DRDlCnY5Nf12dOZamvKsMGhYB+BS4xEjwieOGLM/g:LHHICcNfYk/hYk04xc7eOGL+g

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\变速精灵2.11免费版\skin\default\SkinEditor1.exe
    "C:\Users\Admin\AppData\Local\Temp\变速精灵2.11免费版\skin\default\SkinEditor1.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1252-54-0x00000000761E1000-0x00000000761E3000-memory.dmp

    Filesize

    8KB

  • memory/1252-55-0x0000000000400000-0x000000000041C000-memory.dmp

    Filesize

    112KB

  • memory/1252-56-0x0000000000400000-0x000000000041C000-memory.dmp

    Filesize

    112KB