Analysis

  • max time kernel
    2s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-03-2023 03:22

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\virus\白加黑衍生物\svch0st.exe command="C:\Users\Admin\AppData\Local\Temp\virus\白加黑衍生物\svch0st.exe" wdir=C:\Users\Admin\AppData\Local\Temp\virus\白加黑衍生物 Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    virus/白加黑衍生物/svch0st.exe

  • Size

    985KB

  • MD5

    9606b727e58cb0157e1586adac252462

  • SHA1

    9bbb77aea71b44f0f7737ed47bae3fa67df6c8d4

  • SHA256

    8fcbe954783759e96a9cc1cf6aa2cb16d6c95a8f0a0c661ee0c1e241079c6de2

  • SHA512

    1d07695b0d597703336d0d0a50353712c83ba5354de006a7a444dd270253ce5a4e362cb98e83acfedabe325f29e3da51946cc3625bb8f452cf212cdccc9eba1f

  • SSDEEP

    12288:OL/JAG6yuZ6hivOQffehNA0rswA/C9gCyWJSA6L8nu:e/JAG6mBrsR/C9pyWJSt

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\virus\白加黑衍生物\svch0st.exe
    "C:\Users\Admin\AppData\Local\Temp\virus\白加黑衍生物\svch0st.exe"
    1⤵
      PID:3216

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads