Analysis
-
max time kernel
151s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11/10/2023, 05:47
General
-
Target
东京梦华录全注全译/东京梦华录.exe
-
Size
4.7MB
-
MD5
b73b3b474b151f276d8b8a36f94a1865
-
SHA1
016fa47a76c8ec122670c56c8ff68843bcfe43e7
-
SHA256
259d35d2f47da0d623d378b781131cd1142aac31ac929af30e68902c7222ff3d
-
SHA512
c2ed907cd72e914484bc5eb05513e6e79ec7940ccc8139892e594a6e3506f425684ad878914ebc9f205254e6d3563eeb8eb7a0d9185c9c12791eb535204be6d7
-
SSDEEP
98304:2ge6X9uFPO8Yfaoht3ZnYrDRvMgWxt9b7:2lcuF2hfaov3GrDRvvWH9n
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\东京梦华录全注全译\东京梦华录.exe"C:\Users\Admin\AppData\Local\Temp\东京梦华录全注全译\东京梦华录.exe"1⤵
- Checks BIOS information in registry
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.0MB
-
Filesize
284KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.5MB
-
Filesize
1.1MB
-
Filesize
9.0MB
-
Filesize
4KB
-
Filesize
9.0MB
-
Filesize
4KB
-
Filesize
9.0MB