Overview
overview
3Static
static
3Windows增...lp.chm
windows7-x64
1Windows增...lp.chm
windows10-2004-x64
1Windows增...TL.dll
windows7-x64
1Windows增...TL.dll
windows10-2004-x64
1Windows增...OK.exe
windows7-x64
1Windows增...OK.exe
windows10-2004-x64
1Windows增...��.url
windows7-x64
1Windows增...��.url
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
08/01/2024, 17:45
Static task
static1
Behavioral task
behavioral1
Sample
Windows增强型记事本/Help.chm
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Windows增强型记事本/Help.chm
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Windows增强型记事本/MSCOMCTL.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Windows增强型记事本/MSCOMCTL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
Windows增强型记事本/NOTEBOOK.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Windows增强型记事本/NOTEBOOK.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Windows增强型记事本/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
Windows增强型记事本/新云软件.url
Resource
win10v2004-20231222-en
General
-
Target
Windows增强型记事本/NOTEBOOK.exe
-
Size
104KB
-
MD5
71a2875ac4f33aa2a3ea0de18d0c4d29
-
SHA1
77d083ffddb1f0ef6b7a7b965358ff557e161bb8
-
SHA256
162658c8442cc064a2434927c2960ce0273e9ddae11d063c6fa5240ff7796a74
-
SHA512
9cd7e2955de98eb0addf6acf6b9ea1797d1a3c0b2b6f1303324d93f2bf4db094b3e9ccfcd7e5503284d005dc601a61266bc530a3c954d0ac8a1061972373925e
-
SSDEEP
1536:5/40pE3jw/AUnCEBBK871zlWY6/hbGZC67tugoWp5p1ZHdzg:5g0y3jw/0Ee871K0h7tugoWp5Vi
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3024 NOTEBOOK.exe 3024 NOTEBOOK.exe