ce86e433a5a13b9f25f69bdf5fa00e8c0098c0579783bb6aa27bc5cf3a2e8ffd | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 22:59

Sharing

Report Analysis Logs

General

Target

磁盘格式转换工具.exe
Size

24KB
MD5

fc26ee8e6aec1e8a8a593fe806724e04
SHA1

beea2f0b61173dfd415d4b6f5b8f646de642f333
SHA256

f286db59ea7dc5fd0b2227c7a42c27b464605452767021b2c753ca1a92629507
SHA512

cc47413c911a5a351e2189722fcc30e1aae57c5bf73257dbe03873cf16c4452176c18a48187f423818602dc3405127d097433939539253bc8822f5fb3146bc23
SSDEEP

192:Or7Vd2B6kgReCtuezCTL631sHkZv4Q22yz7Vd2B6kg:Or7VdUioCXlKHYT22yz7VdUi

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1636	磁盘格式转换工具.exe

C:\Users\Admin\AppData\Local\Temp\磁盘格式转换工具.exe
"C:\Users\Admin\AppData\Local\Temp\磁盘格式转换工具.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads