Overview

overview

6

Static

static

3

tw6805a驱...ll.exe

windows7-x64

1

tw6805a驱...ll.exe

windows10-2004-x64

1

tw6805a驱...ci.sys

windows7-x64

1

tw6805a驱...ci.sys

windows10-2004-x64

1

tw6805a驱...er.exe

windows7-x64

1

tw6805a驱...er.exe

windows10-2004-x64

1

tw6805a驱...BL.dll

windows7-x64

1

tw6805a驱...BL.dll

windows10-2004-x64

1

tw6805a驱...er.exe

windows7-x64

6

tw6805a驱...er.exe

windows10-2004-x64

6

tw6805a驱...M4.dll

windows7-x64

3

tw6805a驱...M4.dll

windows10-2004-x64

3

tw6805a驱...up.exe

windows7-x64

1

tw6805a驱...up.exe

windows10-2004-x64

1

tw6805a驱...nt.dll

windows7-x64

1

tw6805a驱...nt.dll

windows10-2004-x64

1

tw6805a驱...nt.exe

windows7-x64

1

tw6805a驱...nt.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    152s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/05/2024, 13:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    tw6805a驱动/P2PClient/FTPPlayer.exe

  • Size

    1.5MB

  • MD5

    a8e33a2792235cbd008bdd2f2b009d7c

  • SHA1

    2f51f10de9194bd06e6ef258f6a1957a25b42d03

  • SHA256

    8ac5ace5c69da38ce18ffb590648bd8246f59a954c865562fdb8c3c15678d907

  • SHA512

    95b81b7717495c3f04e51d0e4d518437c09bbb58ae93806b0bf46643352d17da0a3844aa18d9965582f6a675d7a86deed06cd92213f38d6639df4c99a435b3fd

  • SSDEEP

    24576:gJhLMcH+ivLOBcGjaGptr4TMTTgJooJQP2w0n:IZMcH+GSuotr5TTgJooYa

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\tw6805a驱动\P2PClient\FTPPlayer.exe
    "C:\Users\Admin\AppData\Local\Temp\tw6805a驱动\P2PClient\FTPPlayer.exe"
    1⤵
      PID:1188
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4140 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:2920

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1188-0-0x0000000000820000-0x000000000083D000-memory.dmp

              Filesize

              116KB

              Download

            • memory/1188-1-0x0000000002390000-0x0000000002391000-memory.dmp

              Filesize

              4KB

              Download

            • memory/1188-2-0x0000000000400000-0x000000000058F000-memory.dmp

              Filesize

              1.6MB

              Download

            • memory/1188-5-0x0000000002390000-0x0000000002391000-memory.dmp

              Filesize

              4KB

              Download