Analysis
-
max time kernel
140s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
14/01/2024, 13:51
General
-
Target
SEO助手.exe
-
Size
324KB
-
MD5
99bb010ee995d8c158dcb25144818f02
-
SHA1
fac1bca97262a174b234124b1ddf60d5452ed5cc
-
SHA256
8807fcdfabe295d594bd4bca64a2cd2c2b3aac23262e7d01693ef034b36708bf
-
SHA512
27e70a6fb03dc5df114692eeb9e271f5939c35705bd0319304ea5c53fc94e68cdaa24b8e9e7ad91cfa87e76d9145c58b0cc72ecbf9ef9fb48278839fd44bc42b
-
SSDEEP
6144:MhrB4d7zSkivYMOa6+NfxaMaRaUasqaMayaqaMaMaMa5a:5AYxwNfxxI3bqx5ZxxxE
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SEO助手.exe"C:\Users\Admin\AppData\Local\Temp\SEO助手.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
9.6MB
-
Filesize
4.8MB
-
Filesize
9.6MB
-
Filesize
624KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
3.1MB
-
Filesize
292KB
-
Filesize
9.6MB
-
Filesize
4.7MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB