Overview

overview

7

Static

static

7

TCP列表网关.exe

windows7-x64

1

TCP列表网关.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    14-06-2023 06:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TCP列表网关.exe

  • Size

    1.0MB

  • MD5

    53081527d6e3546cdf21087e43aa5c6c

  • SHA1

    ff61d560fceaed986f658e844bb9b1f0187a9906

  • SHA256

    c1239a228637f772228cfdc4bf27071b898fcc343f9a36c8de98ccf5be956918

  • SHA512

    29882b319b6e6f786a20c0638969758bfec5f5d9acd570ed1038acd86327213ed6fd74db84ae6487e5eb1cda48469fe9951c44dd2798c7448b29e6687fa430f6

  • SSDEEP

    24576:UFtZ87aqoH1obAGfZjnJo1Jx2aWsFb5ftyxRbYgfX7Qs34jKMuOgeB9H:Uq7a51obNb+JtWsFdADYg/7QDIeH

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TCP列表网关.exe
    "C:\Users\Admin\AppData\Local\Temp\TCP列表网关.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1368-55-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-56-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-57-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-58-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-59-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-60-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-61-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-62-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-63-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-64-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-65-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-66-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-67-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-68-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-69-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-70-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download
  • memory/1368-71-0x0000000000400000-0x0000000000698000-memory.dmp
    Filesize

    2.6MB

    Download