5d6bfb0aafc59e351fe7a97ba26a7e567199921e420f5284c579cc42db25c484 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
19-03-2024 06:25

Sharing

Report Analysis Logs

General

Target

伟缘快手1.3.exe
Size

3.1MB
MD5

95c3ec3de4c372facb845d16cdb9e035
SHA1

f871134f906407284147c9170eff2de268873f40
SHA256

ddc8cda0b9fdc9f5697751039e82596ed1cfa49b7b524ae5b6dc09e666d7e2c1
SHA512

f8d5115d6184668646e95d9abe170f65b693597a0c07f8ddf74eb88add1c7d52e24bedf5496ddd63577ab58a4d5d7209a1d31cacdcd51f983bd12e4c268980e0
SSDEEP

98304:WsJjhW+82rEABja2Uj+dHo65w6PkkxPlQ:Z02Zta2Ujn6tLxm

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
824	伟缘快手1.3.exe
824	伟缘快手1.3.exe
824	伟缘快手1.3.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
824	伟缘快手1.3.exe
824	伟缘快手1.3.exe

C:\Users\Admin\AppData\Local\Temp\伟缘快手1.3.exe
"C:\Users\Admin\AppData\Local\Temp\伟缘快手1.3.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads