Analysis
-
max time kernel
177s -
max time network
204s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 11:50
Behavioral task
behavioral1
Sample
植物大战僵尸online修改器.exe
Resource
win7-20221111-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
植物大战僵尸online修改器.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
植物大战僵尸online修改器.exe
-
Size
252KB
-
MD5
95bd21e090d619be1688fb893db3cea1
-
SHA1
51ebb2b8e54305ecdff2b700d3091dc103da00e7
-
SHA256
fd252b6504ee55166c98f403dd12959ef34b9d8834e43e807bd70e717c61b9ac
-
SHA512
93aaa77eb0d295d7c362bb94bae1a0a570430e5b9a4dfff24cf03477274cb93445cdb4f4f0af72af400ac26eccdbfc392aa7dbf0518dd1d4bcd428c684408589
-
SSDEEP
3072:Nr9KKtUStQJeWIaidfO5+DHkSu0iyhb3xfBTdWISictNJKsEiuBWdWZ:NQKtUoOeWIai9DzM07nx6ijTaY
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1292 植物大战僵尸online修改器.exe 1292 植物大战僵尸online修改器.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1292 植物大战僵尸online修改器.exe