Analysis

  • max time kernel
    135s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-05-2024 13:49

General

  • Target

    全民星空.exe

  • Size

    2.2MB

  • MD5

    e082a96f89e7fe60ded3794ed50e813a

  • SHA1

    429342c0323c4481ea1d059deaf373068fbdf663

  • SHA256

    3e1b7d87869ace2c170186d1bca277c4a4d1888aaf3cd2a26de6dca97bc0159a

  • SHA512

    15391b9b4941d66241912326491d997114fdd09a14582844635225b8305201e44f825428c3a25b9d862ba585c8368dc56d3fc3956b190f4d5f5b0a430375b53b

  • SSDEEP

    49152:3oHN0huFrxCh8ZmNAd3ricALqKh1XCfomNIRcoPEG53JMW5dUlg3:3oHvruNAd3riFqyX6oGIk+3Jule

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\全民星空.exe
    "C:\Users\Admin\AppData\Local\Temp\全民星空.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/340-0-0x0000000000400000-0x0000000000726000-memory.dmp

    Filesize

    3.1MB

  • memory/340-1-0x0000000002520000-0x0000000002521000-memory.dmp

    Filesize

    4KB

  • memory/340-2-0x0000000000400000-0x0000000000726000-memory.dmp

    Filesize

    3.1MB