3b2e0f37fce6970e8270f2904bb35d579934ade2428c7d0cb5415ac7d3902cae | Triage

Analysis

max time kernel
28s
max time network
35s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
12/04/2023, 17:32

Sharing

Report Analysis Logs

General

Target

（电-子--发-票）.exe
Size

36KB
MD5

d06c243962c54d2763c2ffb8b16208e9
SHA1

131611862629e205fcc7bcac5fe88c119a507e4e
SHA256

9735de6f7e65882eb34df781669bda22ca6aaf86ffe1a23821a3d2951d27780d
SHA512

4ec8726464562179eea007b4c72822cb42415751349e80de407b85fbdcaff829a0bf1e479c2a3136734d50ef2fc9e6af589310d8b02773b601e6f6f8a8e398bd
SSDEEP

384:rT9fLOVVThwgyO3MuGfJOtP2i1McPDd7MlSN7idOR5Zw7QSc:loCggJOt+i15Pp7nNGORvr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1940	（电-子--发-票）.exe
1940	（电-子--发-票）.exe
1940	（电-子--发-票）.exe
1940	（电-子--发-票）.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1940	（电-子--发-票）.exe

C:\Users\Admin\AppData\Local\Temp\（电-子--发-票）.exe
"C:\Users\Admin\AppData\Local\Temp\（电-子--发-票）.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads