Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
04-05-2024 02:58
General
-
Target
TF卡修复工具 V1.0 官方版/tf卡修复工具.exe
-
Size
24KB
-
MD5
96789a9b23f57699914216e9800a3087
-
SHA1
e41abd0a07077e21f1d42af384dfa22d77ec2a66
-
SHA256
6cd950f736ba13cbc3276569b984d922451e7f0238663185dcb74698034e2a06
-
SHA512
f8b6928102afdf64082e0368524342343d2152c1c1d0d3fce390ae63d280cc80e564c46236cfc492f4545f1f608ed0acbd50c9e32f747026d2afa7e069309651
-
SSDEEP
384:5wYkASm/Q1m6jfnvY5t12a0omN1h+YCsnvTqVWM:5XnWjPvY5tozzh+YNnvTqAM
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Modifies Internet Explorer start page 1 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TF卡修复工具 V1.0 官方版\tf卡修复工具.exe"C:\Users\Admin\AppData\Local\Temp\TF卡修复工具 V1.0 官方版\tf卡修复工具.exe"1⤵
- Modifies Internet Explorer settings
- Modifies Internet Explorer start page
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx