Analysis
-
max time kernel
142s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
08-01-2024 20:16
Behavioral task
behavioral1
Sample
宝宝音乐相册.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
宝宝音乐相册.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
宝宝音乐相册.exe
-
Size
385KB
-
MD5
2b36e9a566f84bbeeb8357d5381998a1
-
SHA1
a36fe44887e2ab06ffbf01b82f7e9c27665ebc58
-
SHA256
a9e58aa993d534488498fb55c58a13b73305585031ce16f8a667bfeb2c4cc681
-
SHA512
be07abf8d6b8312f4cc935a8561dc823bfc15922fd135048c96e98940ee280239d24bcd0f3f0cd2e12d94f5955815681d8dce683cd6ba8d58a3e0d3a399f37e4
-
SSDEEP
12288:FA0XRgbhszHTJSVFjbQHNwfMSVbcAp/88o:K0XRbz1Ct8iUsY+/85
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2208 宝宝音乐相册.exe 2208 宝宝音乐相册.exe