Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
02/06/2024, 13:46
General
-
Target
功夫派桌面版——小伟.exe
-
Size
358KB
-
MD5
0bcb6b5f47285225b638170636aa5ca8
-
SHA1
7a9d9cd4bd64f8e5576903732f14a3533778e1cf
-
SHA256
fb24d7c2ae4bbd47584d345d37f76e11b5fa2271a6226369c80488ab1047f2de
-
SHA512
0871010e52d0a1c00214144986e83a264f44ff07726b70d73e12e4e173244cecf585ab62f462104aa2f6e9ecab026e8581e29b6ec8c9e190b92ffd0e662a548e
-
SSDEEP
6144:hMfFx7YVTUfHGI75q/dO5omG5hctbMzldy89/cCOTwr8AKwpigJFUSoSwN:+vQTUfmKcl56Mzlv9/e8BdoSoSO
Score
7/10
Malware Config
Signatures
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 4 IoCs
-
Modifies Internet Explorer start page 1 TTPs 2 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\功夫派桌面版——小伟.exe"C:\Users\Admin\AppData\Local\Temp\功夫派桌面版——小伟.exe"1⤵
- Modifies Internet Explorer settings
- Modifies Internet Explorer start page
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
860KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
860KB
-
Filesize
248KB
-
Filesize
860KB