6f2d349c34defe02fdaef4c72623ca01b88e461d37f996d15f1f7c3a1d133784 | Triage

Analysis

max time kernel
176s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2022 11:28

Sharing

Report Analysis Logs

General

Target

追逐全屏.exe
Size

564KB
MD5

baba8bc262623a5bba0f07406b34f1af
SHA1

28070f9eb798e08d085364489eb73904fc4762e8
SHA256

64bbee6948bb6d8ffe0e5c105b080de655337c67a63dafaed345febc594c797e
SHA512

ce923448c886695cbd9a6e4a9afcdf7b7a42442c94e90f1a929c05d2c2efed64987b326212cc7b6c8886e038529ade0045212633f87431e4a6b192caf4ef1333
SSDEEP

12288:Cc//////BdjUoOEaHNij4Mo16yOzfE+1wml6/wardSx8bHC9:Cc//////BZ36NijReml6Rr3y

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process
PID 4464 set thread context of 0	4464	追逐全屏.exe

C:\Users\Admin\AppData\Local\Temp\追逐全屏.exe
"C:\Users\Admin\AppData\Local\Temp\追逐全屏.exe"
1⤵
- Suspicious use of SetThreadContext
PID:4464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/0-132-0x0000000000400000-0x0000000000529000-memory.dmp

Filesize
1.2MB

Download