Analysis

  • max time kernel
    141s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29/02/2024, 01:37

General

  • Target

    2460110483/地图编辑器.exe

  • Size

    278KB

  • MD5

    08f943ba44a03f4a87c88295024f6338

  • SHA1

    9c5eb478f635dedd54941a001c673976fb5697b2

  • SHA256

    a4e10bf64185f87f78c055745110ae27aa163ba7479241607ff922033fab8cbd

  • SHA512

    24b8800fa9f9f349a40ae3f82fb3421f8aebd5414a0e69e33b7f286bd89e0defddfd84f69bd9f6b43de7e938acebafcc535d4babfa26b5777f006e1b6bbc70b6

  • SSDEEP

    6144:+uwgKC+ZUEzy7ds7d4dttpnsaUi9YRl/zPeQVtuz7es5ZjeUoq5K8pzTr/a6:+4UWEzd6eP7GQzuzxZaUoqc8pPr

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2460110483\地图编辑器.exe
    "C:\Users\Admin\AppData\Local\Temp\2460110483\地图编辑器.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1620

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1620-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

          Filesize

          4KB

        • memory/1620-1-0x0000000000400000-0x00000000005CC000-memory.dmp

          Filesize

          1.8MB

        • memory/1620-2-0x0000000000400000-0x00000000005CC000-memory.dmp

          Filesize

          1.8MB

        • memory/1620-3-0x00000000001C0000-0x00000000001C1000-memory.dmp

          Filesize

          4KB