Overview

overview

7

Static

static

7

飘荡软件.url

windows7-x64

1

飘荡软件.url

windows10-2004-x64

1

鼠标锁.exe

windows7-x64

1

鼠标锁.exe

windows10-2004-x64

1

鼠标锁定.exe

windows7-x64

7

鼠标锁定.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 09:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    鼠标锁.exe

  • Size

    11KB

  • MD5

    248dd306a96fe2655fae3a50fc130bd4

  • SHA1

    efe50c30727c99009270f62a17b88f99d99cacfd

  • SHA256

    3bb556d0808e0e6e9683d14b9e6012930776a8f4c0e72511c1a72711bf24b383

  • SHA512

    39b626835d8ceb1ea992973b99c739b697bbc11448996566d9a0f84172a6f7e086192b3ba45b1f0c08c2c618ff208f577aa359a2bef6192808b7c14b46fe0c7a

  • SSDEEP

    192:ytMVJgKpkC2nShAFZt2kMhGfxz2HP7fAx/wCMrpY7e8LqPZo5LdCfq1Rn6O3QBBX:yt9KpVMDPMhuxwfAx/r6+e9Pfqbn1Q3w

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\鼠标锁.exe
    "C:\Users\Admin\AppData\Local\Temp\鼠标锁.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2184-0-0x0000000000400000-0x0000000000409000-memory.dmp

          Filesize

          36KB

          Download

        • memory/2184-3-0x0000000000400000-0x0000000000409000-memory.dmp

          Filesize

          36KB

          Download