Analysis

  • max time kernel
    167s
  • max time network
    182s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 06:06

General

  • Target

    网络寻宝图/AutoUpdate.exe

  • Size

    274KB

  • MD5

    d5a8f202de31e34259258339422a1f27

  • SHA1

    9306fdefcc16015165992987fd640b032d840174

  • SHA256

    bae3e5c58352525c511f64bb4abd4e3ade0a5828178584f232664dd9f03881d4

  • SHA512

    b1c5da9ac0ff8749707fd90a3ddd2eae4a0da2bec5f009eb197fd85c8e5f49d4dda2b102e91e4469eb9e8d21c757b98469f7425435fb29d1a54c9b78b4a1d3eb

  • SSDEEP

    6144:Hux5FBKkiBjcEPjGKWkW/gWHPT5QUmLJJuo9tsTnE+qJyZFVo6l1Uz:HuxFLSbukW/glddgDJqOdl1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\网络寻宝图\AutoUpdate.exe
    "C:\Users\Admin\AppData\Local\Temp\网络寻宝图\AutoUpdate.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2448-0-0x0000000000400000-0x00000000004B8000-memory.dmp

    Filesize

    736KB

  • memory/2448-2-0x0000000002250000-0x0000000002251000-memory.dmp

    Filesize

    4KB

  • memory/2448-3-0x0000000000400000-0x00000000004B8000-memory.dmp

    Filesize

    736KB

  • memory/2448-4-0x0000000002280000-0x00000000022B1000-memory.dmp

    Filesize

    196KB

  • memory/2448-5-0x0000000000400000-0x00000000004B8000-memory.dmp

    Filesize

    736KB

  • memory/2448-6-0x0000000002280000-0x00000000022B1000-memory.dmp

    Filesize

    196KB

  • memory/2448-9-0x0000000002250000-0x0000000002251000-memory.dmp

    Filesize

    4KB

  • memory/2448-13-0x0000000002280000-0x00000000022B1000-memory.dmp

    Filesize

    196KB