Analysis
-
max time kernel
141s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-12-2023 09:05
General
-
Target
YY5331过非法VE/SysCallRetriever.exe
-
Size
608KB
-
MD5
97ec7e5901bd8d21dfcaf46f901a64e7
-
SHA1
154dd0688258a60159d78f35f90db511280b261d
-
SHA256
3b85cc71553647ad2ff61b58c1addea4027fa6dce87a5d3fa27f7d53dbdc06f0
-
SHA512
11380bb27e829c120324a4eb0c3d963dde73d484f2e638ddefe8427e07aa15dc5e404984a8159d6782f992d2f2135a5a6a59f3ffc867787e92d21d30c890f320
-
SSDEEP
12288:EQzf9fPaXlvtaeqT68wcVsDH1VmgyJXxbjG9G99GGG:tF6XpYeqT68wcVM1Agy
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\YY5331过非法VE\SysCallRetriever.exe"C:\Users\Admin\AppData\Local\Temp\YY5331过非法VE\SysCallRetriever.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
648KB
-
Filesize
136KB
-
Filesize
648KB
-
Filesize
4KB
-
Filesize
136KB