9072a57cf469143a7724db62c3cda2fa73544d27fa283ff8e68ba3619c9b908a | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 14:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8UFtp智能扩展服务端/TFtpServr.exe
Size

92KB
MD5

e4e4603392a0d7f15ca1210e3f40d181
SHA1

f5587a047dbf1c52867ec50d945f5960462a540b
SHA256

7fb4f3def93e63ffd57c2fdbe67bce4b829a4596220b34e4e536dde2d4d94f85
SHA512

e8772d0b95b60294bbbb412256542a888d8e3dc5a5002d933ce8a917c0ee0a2faa504a60afabbd82239d989452aecce9e2e6ff60915551b4ffafbc2fdbe9c73a
SSDEEP

1536:rLwGq0GAOI/YyWCy4yKLiCNblWSC3z7ZgVJC0ZgMZFEdq78aIoZVO:IrAOqpP+Co+WWSqlO

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2188	TFtpServr.exe

C:\Users\Admin\AppData\Local\Temp\8UFtp智能扩展服务端\TFtpServr.exe
"C:\Users\Admin\AppData\Local\Temp\8UFtp智能扩展服务端\TFtpServr.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads