Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/01/2024, 23:12 UTC
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MicroMiniNew.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
MicroMiniNew.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
MicroMiniNew.exe
-
Size
3.0MB
-
MD5
6e4b0ea8818cc26e9170a1c9f855e994
-
SHA1
87d23fde52b06145e9a6a02d1994dc74105af714
-
SHA256
a25e1156c42ef797085c3d6a4afe8f2691f0889bc695b34b8d4eaafc775ef91d
-
SHA512
bb839d8c5f7a027dce4d045e614e1e6ed82b458fb0014fbe215de35926ae8e48eee1c8f049b22b6627a068ac8a85eccb107a3090db7eedc9a2a0a9ba10464f14
-
SSDEEP
98304:OlgJZ4XTIIQKAzav4oGrvUTtC8J1XwLeE4Og2kohJivNxo+j:Og42FmwycAOrPivNxo+j
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3024 MicroMiniNew.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3024 MicroMiniNew.exe 3024 MicroMiniNew.exe
Processes
Network
-
Remote address:8.8.8.8:53Requestoperate.mini1.cnIN AResponseoperate.mini1.cnIN A116.205.254.163operate.mini1.cnIN A116.205.254.176operate.mini1.cnIN A116.205.254.181operate.mini1.cnIN A116.205.254.186operate.mini1.cnIN A116.205.254.210operate.mini1.cnIN A116.205.254.222operate.mini1.cnIN A116.205.254.245operate.mini1.cnIN A124.71.120.9operate.mini1.cnIN A124.71.120.204operate.mini1.cnIN A124.71.120.249operate.mini1.cnIN A116.205.254.12operate.mini1.cnIN A116.205.254.37operate.mini1.cnIN A116.205.254.50operate.mini1.cnIN A116.205.254.111operate.mini1.cnIN A116.205.254.132operate.mini1.cnIN A116.205.254.145
-
Remote address:8.8.8.8:53Requestmnweb.mini1.cnIN AResponsemnweb.mini1.cnIN CNAMEmnweb.mini1.cn.wsdvs.commnweb.mini1.cn.wsdvs.comIN A163.171.129.134
-
104 B 2
-
52 B 1
-
52 B 1
-
52 B 1
-
52 B 1
-
52 B 1
-
52 B 1
-
52 B 1
-
52 B 1
-
52 B 1
-
1.1kB 7.0kB 8 10
-
62 B 318 B 1 1
DNS Request
operate.mini1.cn
DNS Response
116.205.254.163116.205.254.176116.205.254.181116.205.254.186116.205.254.210116.205.254.222116.205.254.245124.71.120.9124.71.120.204124.71.120.249116.205.254.12116.205.254.37116.205.254.50116.205.254.111116.205.254.132116.205.254.145
-
60 B 114 B 1 1
DNS Request
mnweb.mini1.cn
DNS Response
163.171.129.134