Overview

overview

6

Static

static

3

ProcessSpo....5.zip

windows7-x64

1

ProcessSpo....5.zip

windows10-2004-x64

1

ProcessSpoofer.exe

windows7-x64

1

ProcessSpoofer.exe

windows10-2004-x64

1

SpooferHandle.dll

windows7-x64

1

SpooferHandle.dll

windows10-2004-x64

1

data/getServer.bat

windows7-x64

1

data/getServer.bat

windows10-2004-x64

6

data/info.txt

windows7-x64

1

data/info.txt

windows10-2004-x64

1

data/server.txt

windows7-x64

1

data/server.txt

windows10-2004-x64

1

hide.txt

windows7-x64

1

hide.txt

windows10-2004-x64

5

libMinHook.x64.lib

windows7-x64

3

libMinHook.x64.lib

windows10-2004-x64

3

readme.txt

windows7-x64

1

readme.txt

windows10-2004-x64

1

Analysis

  • max time kernel
    436s
  • max time network
    1164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 01:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ProcessSpoofer.v1.5.zip

  • Size

    227KB

  • MD5

    c24f8dafe9e570b1513ba1a2b6810138

  • SHA1

    46fbb76078ce508ae4d87dfdcdf9f70ef4c1a8d2

  • SHA256

    e90566cb4749892ac21828eed527e7d1e01a02687e1180d5d6cf9931c0d55ef4

  • SHA512

    4466873fe41225405afebef1321222a94d70451f2cc7d24fa71a8c71bfe922d00f1f15b506cc67fede053c8fff2a7cc843847de353e7be18ade317d60bd7a279

  • SSDEEP

    3072:nUhij135DZhM2JweuZGiIAvSy48adIyigEF/mTdtV1hNP1oSJcIC5xpMrI:nUgpDZ9UZGkqy41n9EFG9GY0xKrI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\ProcessSpoofer.v1.5.zip
    1⤵
      PID:4108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads