0efdbbf5c77cdac63b152d57df3a19a0282edf6c9fdd70151b28b4ffb7c17c38 | Triage

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

音悦台MV获取器V1.7.exe
Size

936KB
MD5

3904ba455758aed5252beb557321f954
SHA1

59c2ca5ee2f5c8212da82085c83525d4941f4b80
SHA256

a954518c2a3df4bf5118c541ad8cade92231d3efc5addafddccf8392efbb896c
SHA512

88dff924c15120d8b5e882ac600c37bd17c4f5ed31483ecdb09951f9e936dc0eff612cf587808f03ab77d95b933fc43fbf6ecaf0079c4929e8ed3ae3fc15180b
SSDEEP

12288:2VMnwBdxTNt1kSGkHazIsXD7EVGKPUGo88xayVhyjhStEZ5t9zE:4MGTH1BGYazTDUUGUPy8

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1504	音悦台MV获取器V1.7.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1504	音悦台MV获取器V1.7.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1504	音悦台MV获取器V1.7.exe
1504	音悦台MV获取器V1.7.exe
1504	音悦台MV获取器V1.7.exe

C:\Users\Admin\AppData\Local\Temp\音悦台MV获取器V1.7.exe
"C:\Users\Admin\AppData\Local\Temp\音悦台MV获取器V1.7.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads