Analysis
-
max time kernel
140s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
02/06/2024, 06:54
General
-
Target
百度贴吧助手v1.0.4.exe
-
Size
434KB
-
MD5
335eae15a6efc206c31f5b2e9435e781
-
SHA1
7604df181423dd06e7f82caf6e5affa15fe9321c
-
SHA256
b71f9c3a7147b1b2399aa90ee8f7583eeaf1471aa0a59f24360170b8d6d02988
-
SHA512
7c3de2eb16561279269778b65ca9033d7bb1b573213a82a23941df3e7bee847920a31ed371f8b32e3498cae7fa88375f5b60629b7718175a33c1d6c8477cb84d
-
SSDEEP
12288:8DgcIv9GgFCCby3PjSMfgKdlMgeocNbQ6/oS:8284CCiPpfFPeoch
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 19 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\百度贴吧助手v1.0.4.exe"C:\Users\Admin\AppData\Local\Temp\百度贴吧助手v1.0.4.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
86KB
MD5114054313070472cd1a6d7d28f7c5002
SHA19a044986e6101df1a126035da7326a50c3fe9a23
SHA256e15d9e1b772fed3db19e67b8d54533d1a2d46a37f8b12702a5892c6b886e9db1
SHA512a2ff8481e89698dae4a1c83404105093472e384d7a3debbd7014e010543e08efc8ebb3f67c8a4ce09029e6b2a8fb7779bb402aae7c9987e61389cd8a72c73522
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
248KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
248KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB