Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
26-05-2024 01:36
Static task
static1
Behavioral task
behavioral1
Sample
data.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
data.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
免费领取6000M流量快餐.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
免费领取6000M流量快餐.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
更多软件下载.url
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
更多软件下载.url
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
飘荡软件.url
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
飘荡软件.url
Resource
win10v2004-20240508-en
General
-
Target
data.exe
-
Size
600KB
-
MD5
2fbd644812de8a4ea83984c2eccb0b3b
-
SHA1
f702098efa6020b71dcdb65e447481cd4919977a
-
SHA256
36f87630b9d8dd60b1c9499d9dcb07f66eb5e31b3d50096b4de573cbeb454801
-
SHA512
8273ecd763ec0dc5d9f128a4f6672ba3f6a57d35c4399b0e13e2ca504a69c91b8b433bd73d5d09817e090021c2929b223ec1af4bc0f93f62fe7032f1579fdb31
-
SSDEEP
6144:v08gh/c9v9TENTQ3wzieQr7fmgolmjxYR+corMNuWHgiZRjo/DeLN4/:vMhM9TcQwzieG7f+NZfAWHNuD
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3056 data.exe 3056 data.exe