Overview

overview

5

Static

static

仙巫倍攻.exe

windows7-x64

5

仙巫倍攻.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    144s
  • max time network
    167s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-11-2022 11:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    仙巫倍攻.exe

  • Size

    739KB

  • MD5

    74c99e25a2f03d9c0e3aee740149388f

  • SHA1

    084483c99f8b4edd324c1e3d5c4027b8090fc5a0

  • SHA256

    f08946d29359e1f7338ae82b41f827d9fb088476c7125f84a9c9a5ca6ed26a84

  • SHA512

    e452a5d5fecf4aeb44d88aaafad7fe0144d9bb35889df7386ca62a0f393e5f3ca81f9c5d65d2c1a71877db42606234e5c64443c8786ce7574a70786ff9bc9ca1

  • SSDEEP

    12288:Oc//////ZTVbK+lMVOxPtnYrac8uqR1r49C62fb294YfRh0+pOXrEVkY44RJzkX6:Oc//////ZFxPtYrafRtd2SYfRDSA744Z

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\仙巫倍攻.exe
    "C:\Users\Admin\AppData\Local\Temp\仙巫倍攻.exe"
    1⤵
    • Suspicious use of SetThreadContext
    PID:2152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/0-132-0x0000000000400000-0x00000000005B8000-memory.dmp

    Filesize

    1.7MB

    Download