Overview

overview

7

Static

static

3

Keymaker/keygen.exe

windows7-x64

1

Keymaker/keygen.exe

windows10-2004-x64

1

polyview4.36.exe

windows7-x64

7

polyview4.36.exe

windows10-2004-x64

7

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 22:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    polyview4.36.exe

  • Size

    3.1MB

  • MD5

    18cfa60411c61ee5b2ce62b9b8d3c192

  • SHA1

    0d7cadba4e83f0fbf3acbddcb60f167ab774a5ab

  • SHA256

    d0c88274a4e3ad86cb0cbb86bf819e183143ba8da3f50ac92b13d02eb6faa443

  • SHA512

    6f96214a286084449d9f3187f1aed0feb53cbbdb8d3de1126719325327db63c7e18ec8f19ccfc5463863b9f3faeb269e434bca494e0541635cfc8c215c7e82b7

  • SSDEEP

    98304:NgfVbKJjc9yvuZ404AS1cmUVNcswtZWO+IANNYYJ:NgfVbK69yvuW04/XUTGZ9+IAcq

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\polyview4.36.exe
    "C:\Users\Admin\AppData\Local\Temp\polyview4.36.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Drops file in Windows directory
    PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\GLC954.tmp
    Filesize

    155KB

    MD5

    f2340a00438cc990fee6dda07caf9499

    SHA1

    3e4112beb0597e0119fe33ea7bf97fbc83a713ab

    SHA256

    4efbe3c16f83ee79aaba6eff338e5d4fc8f06449f9df89cacec92c7af2629f42

    SHA512

    c92e2030f7fbd97dfc4084e2beb24198b793fcf3645c1e72db736ccb8a1daaff90597f286f1e2109a40aea7823719ed883db49bbae1a2320de451077ecbdc049

    Download Submit