Analysis

  • max time kernel
    41s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28-11-2022 02:31

General

  • Target

    太阳品牌血煞.exe

  • Size

    2.5MB

  • MD5

    3a70bc8bb0e2595c17e55d5473b65b3c

  • SHA1

    91e63c00abca8eec2a32d9ee94b1e510eb731614

  • SHA256

    f2516ab58d10f6131b21d72f8a4f72ddcd05564f7be1f3878114a52bb036568d

  • SHA512

    197c69eb4a1ae7423cbc1782968131ca70653374304b5a4244eacd911ba56c34f7b51a46eb39a0db545ef128515addca89d4cbf0fb6d7cb245a71ea0ff752ca8

  • SSDEEP

    49152:ItoK3MJg+pSHxxPIzaXQN/QCQ7jXHHcsADu/iI9bLuGgMW5dUlga3:AMiYSRxP687j3TfmGgulb

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\太阳品牌血煞.exe
    "C:\Users\Admin\AppData\Local\Temp\太阳品牌血煞.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1972-54-0x0000000075A11000-0x0000000075A13000-memory.dmp
    Filesize

    8KB

  • memory/1972-55-0x0000000000400000-0x000000000082D000-memory.dmp
    Filesize

    4.2MB

  • memory/1972-56-0x0000000000400000-0x000000000082D000-memory.dmp
    Filesize

    4.2MB