Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/04/2024, 11:22
General
-
Target
奇方vCard(vcf)手机通讯录转换生成器免费版 V1.0.exe
-
Size
876KB
-
MD5
e994c96d4fab95d3786ac9cb7b300ed2
-
SHA1
d20cf0335e12c10468a71f9e83e106c9575e9b54
-
SHA256
278976351b4105d6625575d2aa8c3c2953c5f99bc4213b12ec3168d55147d568
-
SHA512
460d4d8623c60beba5225669b789d2038a50d688b8773904176e2a3e2c27acaf5c7316e4b4a6d941d60aeac78924a9d872c2e579ac67c261b1888eace1105dae
-
SSDEEP
12288:+nCvkJkCkU83jZAON8t/JpWicCAJbj9LWSCQAzr:+nHJkCkUijiOuB6ic9J/JW8AP
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\奇方vCard(vcf)手机通讯录转换生成器免费版 V1.0.exe"C:\Users\Admin\AppData\Local\Temp\奇方vCard(vcf)手机通讯录转换生成器免费版 V1.0.exe"1⤵
- Suspicious use of SetWindowsHookEx