Analysis
-
max time kernel
126s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
19/12/2023, 10:46
General
-
Target
按键连发助手(4款)/其余几款/无限火力连招/华丽LOL无限火力助手.exe
-
Size
1.7MB
-
MD5
0470e3709467525cad4a613566072bfe
-
SHA1
4a1e1986cfa2f7dbf943b6ed1608b20140b9ce22
-
SHA256
15532a7bc2034f2acff0297ae2715d0e32b3c3ddd32a4a327a6e2a8938447f33
-
SHA512
5c7b23801a16b0b896fa91c4329fff1a5cd1de925ff693741f638f5f8c3b43cebc4efbb6e6e8ba1ad6bdd4cc96a2535b3504306425eba2d1a42cf819520dfce2
-
SSDEEP
24576:AqBAgG/1vJyQlmcXOzKht9zkpDSi6LMcrxf9LOd3O9EAkftAjmcW27dEXiKU7Yro:A6AgyBlmpGWANS3YhWgKU7GWegspNa
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\按键连发助手(4款)\其余几款\无限火力连招\华丽LOL无限火力助手.exe"C:\Users\Admin\AppData\Local\Temp\按键连发助手(4款)\其余几款\无限火力连招\华丽LOL无限火力助手.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.8MB