Analysis
-
max time kernel
187s -
max time network
227s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
27/11/2022, 20:15
General
-
Target
BackMir修改器升级版.exe
-
Size
1.8MB
-
MD5
345903c2add834fbd407ea1480f2eed7
-
SHA1
c0a8c5fe4fa67c645b8b69bacc9d4aea95e5d48d
-
SHA256
7c2ae5ab3d290cfbd3e4744ccff223b925cfdb2d108ca6fc947d667598d91c3c
-
SHA512
3657fb25f4bf96ad4a580f74adff046d3fe118ca1aca70a800e7e3d7dbca67f9c06f7187833a81dd74f251ccb86be918d5b83b850f86cc6c70dcbc543376990e
-
SSDEEP
49152:rfiQ3hVXL8iL2BahwEO42qdbm6BX7TQ3a5yRjK:jZfoiqBeNjXI3a5KO
Score
8/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 34 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BackMir修改器升级版.exe"C:\Users\Admin\AppData\Local\Temp\BackMir修改器升级版.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
8KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
2.2MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
2.2MB
-
Filesize
248KB
-
Filesize
2.2MB