b111bd7914ddab09f3654bde60d0ea7bf0851dd01110787db4a43066b3b7c1ea | Triage

Analysis

max time kernel
153s
max time network
199s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 15:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

海底管家.exe
Size

1.2MB
MD5

868d20657fa7049ba69223ed57bc66d9
SHA1

61bd5d98a21cd28c5be4ac8455563d50a2c0e2d6
SHA256

c4bdcc2f3394fc9af736f643edbc464d5f5188c7fd11d91d3763948dba661bc0
SHA512

e365115df1ea5cf04bff643d582e8dcb07a2adca0f6fc0c0ada6271963315efe6009fca245d630ed4d5191e5daa63580fe16a6515ed445bcb057034c00097a95
SSDEEP

24576:BnDQEgOzAHKRQJWtXFRrsAcjfszm1dnQ6xdnTTJCI0Ry:B2YrRrsHj9DQmdTTh

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4068	海底管家.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4068	海底管家.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4068	海底管家.exe
4068	海底管家.exe
4068	海底管家.exe
4068	海底管家.exe

C:\Users\Admin\AppData\Local\Temp\海底管家.exe
"C:\Users\Admin\AppData\Local\Temp\海底管家.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads