Analysis
-
max time kernel
146s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
07/01/2024, 14:58
General
-
Target
ajwawabansu-v1.0/变速娃娃.exe
-
Size
164KB
-
MD5
3e221ec4526c148b5376f90af6efe763
-
SHA1
a05761ced0e1faec1f83e11ee16469f863a068e2
-
SHA256
97a8fafb0992faccd7f513b663001d186f64b4e619418195d55d67af344d8322
-
SHA512
f1a2250065d6dcb98f174e2fc765b2646fdde3b5683accd3a231b17b20d845a2fb20f1262ac351c66ed09825650c5c404577ddf58f04390162373bba491656a1
-
SSDEEP
3072:1tzwZPHoReW1H6PRzxkO+OkRLRGzkwDUq1ijxvrQc0FPDPBo+JcRwvGYhvMoutVh:LtReW1H6PRdkO+RgowDUxjxDQccLKKhK
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ajwawabansu-v1.0\变速娃娃.exe"C:\Users\Admin\AppData\Local\Temp\ajwawabansu-v1.0\变速娃娃.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
596KB
-
Filesize
596KB