Analysis
-
max time kernel
143s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
28-08-2023 18:52
General
-
Target
更新器.exe
-
Size
1.3MB
-
MD5
b321a0fcc27f77fef94cdf904c53d4e6
-
SHA1
f788c475c64d6aa2ce4ed000e7d4565defd632fb
-
SHA256
ca8676b88ce4e8059f82947e55261664113a8c314a3ca1ea24f9a462d84da791
-
SHA512
99ad21346dcba730ceca51403f1ff3aa48df2804f782827fa235c4d17091d370a8680f291ce80a5c7c079425100a72ceb5837c8c64a9ee9f58e1e5378f7e6817
-
SSDEEP
24576:AEVCfBVyYLQY9B7SW7GM9KaFvjd0sR8zta9UMfCt928N1:A/DMCSWhEaF7d0c8Ra9y1
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\更新器.exe"C:\Users\Admin\AppData\Local\Temp\更新器.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx