c1239a228637f772228cfdc4bf27071b898fcc343f9a36c8de98ccf5be956918

Analysis

max time kernel
140s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
14-06-2023 06:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

TCP列表网关.exe
Size

1.0MB
MD5

53081527d6e3546cdf21087e43aa5c6c
SHA1

ff61d560fceaed986f658e844bb9b1f0187a9906
SHA256

c1239a228637f772228cfdc4bf27071b898fcc343f9a36c8de98ccf5be956918
SHA512

29882b319b6e6f786a20c0638969758bfec5f5d9acd570ed1038acd86327213ed6fd74db84ae6487e5eb1cda48469fe9951c44dd2798c7448b29e6687fa430f6
SSDEEP

24576:UFtZ87aqoH1obAGfZjnJo1Jx2aWsFb5ftyxRbYgfX7Qs34jKMuOgeB9H:Uq7a51obNb+JtWsFdADYg/7QDIeH

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

TCP列表网关.exe

pid process

3240 TCP列表网关.exe
Suspicious use of SendNotifyMessage 1 IoCs

Processes:

TCP列表网关.exe

pid process

3240 TCP列表网关.exe
Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

TCP列表网关.exe

pid process

3240 TCP列表网关.exe
3240 TCP列表网关.exe

pid	process
3240	TCP列表网关.exe

pid	process
3240	TCP列表网关.exe

pid	process
3240	TCP列表网关.exe
3240	TCP列表网关.exe

C:\Users\Admin\AppData\Local\Temp\TCP列表网关.exe
"C:\Users\Admin\AppData\Local\Temp\TCP列表网关.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3240-133-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-135-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-136-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-137-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-138-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-139-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-140-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-141-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-142-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-143-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-144-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-145-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-146-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-147-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-148-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download
memory/3240-149-0x0000000000400000-0x0000000000698000-memory.dmp

Filesize
2.6MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads