Analysis
-
max time kernel
151s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2022, 03:16
Behavioral task
behavioral1
Sample
word to pdf绿色版.exe
Resource
win7-20221111-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
word to pdf绿色版.exe
Resource
win10v2004-20221111-en
2 signatures
150 seconds
General
-
Target
word to pdf绿色版.exe
-
Size
252KB
-
MD5
95bd21e090d619be1688fb893db3cea1
-
SHA1
51ebb2b8e54305ecdff2b700d3091dc103da00e7
-
SHA256
fd252b6504ee55166c98f403dd12959ef34b9d8834e43e807bd70e717c61b9ac
-
SHA512
93aaa77eb0d295d7c362bb94bae1a0a570430e5b9a4dfff24cf03477274cb93445cdb4f4f0af72af400ac26eccdbfc392aa7dbf0518dd1d4bcd428c684408589
-
SSDEEP
3072:Nr9KKtUStQJeWIaidfO5+DHkSu0iyhb3xfBTdWISictNJKsEiuBWdWZ:NQKtUoOeWIai9DzM07nx6ijTaY
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4232 word to pdf绿色版.exe 4232 word to pdf绿色版.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4232 word to pdf绿色版.exe