Overview

overview

3

Static

static

3

3DMGAME �...��.url

windows7-x64

1

3DMGAME �...��.url

windows10-2004-x64

1

GuJian1.Tr...ng.exe

windows7-x64

1

GuJian1.Tr...ng.exe

windows10-2004-x64

1

TrAntiAnti...64.exe

windows7-x64

TrAntiAnti...64.exe

windows10-2004-x64

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-08-2023 13:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    GuJian1.Trainer.V3.1.3-XiaoXing.exe

  • Size

    3.7MB

  • MD5

    1fd7ce55d5a80bf9e2b408491d6a8d05

  • SHA1

    c6b920aa4438db4c79e2e8e2446bdfa7b5930eba

  • SHA256

    e4eaa926b246b027228d5982d52e71345fa08a34c71474c618748b9bdbb6a10a

  • SHA512

    883f068b424f17ccbc4b18ec87849cb37f46337aee3615138b18750c4b6861cd026ba19e423ddf3bcdaeb086c07caa1c8194cdd9e1161dc7b5fc7626c612afe8

  • SSDEEP

    98304:j9s0wqREzRpnAY6Jps60E/5I1BStqBxoFLOAkGkzdnEVomFHKnPb:jlEzPA/hI1BStqnoFLOyomFHKnPb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GuJian1.Trainer.V3.1.3-XiaoXing.exe
    "C:\Users\Admin\AppData\Local\Temp\GuJian1.Trainer.V3.1.3-XiaoXing.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\GuJian1.ini
    Filesize

    173KB

    MD5

    8310060587ee5c461b2e51c3c04a3d86

    SHA1

    5494a754c388997fe80373f5a3d5e72eac2d5081

    SHA256

    8a55b1229c374f8f43e44ab9f1656d8fdbf9615a63afec367be21f360d0d7961

    SHA512

    dfcbf39b61aa671bd8926633d078a913dadae591372496224a28ce5f3e934f4717e4b99d229550344a4b697b9f5ce2fcfc1a76167cc9236c476e20edb5c7608c

    Download Submit