Analysis
-
max time kernel
141s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31/12/2023, 01:51
General
-
Target
梦幻精灵.exe
-
Size
238KB
-
MD5
faae75be4a7c0d9c461566193ec5d1f5
-
SHA1
087bb32d4d1088da950fd8ef4d6e41ff956c167e
-
SHA256
ae828d2181c25746fd6eec2df0640aac457323c0017b10735ea3e26047d4da76
-
SHA512
dab976d1876bc1eead6848400ec75830a992d8432c5799e7907a8937d41e78fcea2cadd431f445f7cd5ce994d2316c07fde4a9d248c890a2a876f2738c648bc2
-
SSDEEP
6144:/KyqpQuBjixj0pzGHYc8+hQZN17Jogakrpv:SyfxjciHYJGQj1Rakrpv
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\梦幻精灵.exe"C:\Users\Admin\AppData\Local\Temp\梦幻精灵.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\regsvr32.exeregsvr32 /s COMCAT.dll2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68B
MD56e16059b0c80dce69d092d5313599519
SHA14559a67d32997c46805c89861af50534c518b369
SHA2564913966b3c0f4d0bf8e9ff70252a41d482124d211264fbca78323763d209452a
SHA512bea73e09a59b8638893f6f70e2526c7b5b99cd3ce60a47d9b6f06a4a57857edbbc7e9c76d87f4671d71d517b65c1bc1f6ccc79f77cb0080247ec0126710f8a1d
-
Filesize
1.5MB
-
Filesize
1.5MB